From nobody Fri Jan 12 00:33:25 2024 X-Original-To: freebsd-hackers@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TB2Zc0DVmz56vpQ for ; Fri, 12 Jan 2024 00:33:28 +0000 (UTC) (envelope-from leres@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4TB2Zb50yJz4brm for ; Fri, 12 Jan 2024 00:33:27 +0000 (UTC) (envelope-from leres@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1705019607; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=NT6R5RxnWd9WLHVjEK5kVgVK7DNjwBU8TalWH8dLg/g=; b=G9o287szP+DEo3dctbvolfPZX9PtBuF3i8ZlPXhTx2FW90NS6utyrrJg2L2abGRkXlJHpQ vgE6xrEGvACvYgRW1gZ3252GwnhMFQ0QrHHFAygijJPyXm/89zsqf6Sy+2p6g3zBlszxqJ L4AuJT2x0Q3YcR2aTkgKBz5Hp7az8q7TTRLjUZAfLlNLZu0iq5oWL7czHBbuGQ2AgwnkAW FS2dfLMcGC3KKfQHvmAI1lk5DjZc2zZodc3PxCh4qUXNQanx9k6/OwguxDWeJA2zuugkmq ttSvVNKPPnFJSPOlKNsevYFVPnfvjOoxzfAKv+LohM3r35VZB+EfRSwgZpgCAg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1705019607; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=NT6R5RxnWd9WLHVjEK5kVgVK7DNjwBU8TalWH8dLg/g=; b=dRLSue1NgAt5Tj9S5zxOk4Hf+UynoekLUWNv9dq7lmN7D+mGxdWkv4VsoVNz8lS0vn0D0f Mnlt/YIpjiYiQxVcuhz5pVwleC4xJcBFivkjdp52NZHcLsReinT5UpPe+CyPveHJ+Q1Jht 610GYC6qd9mHMzjKb+gKPZZOGjHAgWierSPYalM9TGwCMMiHacaVR29rECPfzQnarD1aNx RQsQfR28EDjQDgwYMf4kgXKqKLetRDNTfS7jJMy7c2tlSbmJQt1v8my+F7GwlS9FpT6gYY 2mRY/U9Ss40PJLn9bRg1yES0rmCuZ/G91hvE+A+DtOQxR1OZiVSVLzjYnqu75A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1705019607; a=rsa-sha256; cv=none; b=U5bK3FZn5td/WEIyabVtwVrxsQShWaDpsWciZ4f2fSp4jxGbTj/7cLSBmYG+F4SPqAPS8c Dxf6jjionQ9wv6kzIjzz070H3dtxxgcRDYuSr56AG9MRaZc3cQR9XGHXV5KTjJl0S2f9Gd LKfuy1AzaLY6OwHbHwAS05HehCeB4gUvoqY6msoiItH/ghdl5AgM32USWszMX0aTvX/KMd 6bn++4NYNZwAF2adzo2tXLOLqogYY09XASyabECev/H/m5xvyBIMBkupOjwkf4Cqv4RpYn a7y2e1REmscTCMeIguqt8MCCYejkxaoYmglKNqaRBkl4XNDMt5apgPwhW0NeRA== Received: from [IPV6:fd:1965::2] (unknown [IPv6:2600:1700:ab1b:6800:2e0:edff:fece:8f27]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: leres) by smtp.freebsd.org (Postfix) with ESMTPSA id 4TB2Zb34xtzY8M for ; Fri, 12 Jan 2024 00:33:27 +0000 (UTC) (envelope-from leres@freebsd.org) Message-ID: Date: Thu, 11 Jan 2024 16:33:25 -0800 List-Id: Technical discussions relating to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-hackers List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-hackers@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US From: Craig Leres Subject: poudriere 3.4.0 regression: -i runs as NON_ROOT user To: freebsd-hackers@freebsd.org Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit I posted an issue on the poudriere github a few weeks ago but have not gotten any feedback so let me ask the question here; is it now expected that "poudriere -i" is supposed to run as a non-root user when normal poudriere bulk builds run as root? Here's the github issue: https://github.com/freebsd/poudriere/issues/1100 The appended is the way I have debugged ports ever since I first learned how to use poudriere 7 years ago. Now I have to take the additional step of using jexec to get a root shell in the jail otherwise bsd.port.mk thinks UID = 0 and tries to chown/chmod things which doesn't work when it's actually running as nobody... Craig zinc 1 # poudriere bulk -i -j 13release -p current ports-mgmt/pkg nobody@zinc:/usr/ports/ports-mgmt/pkg % ps ut USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND root 13864 0.0 0.0 13680 2964 1 SJ 21:39 0:00.00 login [pam] (login) root 13865 0.0 0.0 13656 2972 1 SJ 21:39 0:00.01 su -m nobody -c csh nobody 13869 0.0 0.0 13936 3196 1 SJ 21:39 0:00.00 _su -m -c csh (csh) nobody 13871 0.0 0.0 13936 3836 1 SJ 21:39 0:00.01 csh nobody 14094 0.0 0.0 13444 2852 1 R+J 21:39 0:00.00 ps ut nobody@zinc:/usr/ports/ports-mgmt/pkg %