From nobody Mon Jan 15 04:11:02 2024 X-Original-To: freebsd-hackers@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TCzGb1dhsz57Z6F for ; Mon, 15 Jan 2024 04:11:19 +0000 (UTC) (envelope-from marklmi@yahoo.com) Received: from sonic307-8.consmr.mail.gq1.yahoo.com (sonic307-8.consmr.mail.gq1.yahoo.com [98.137.64.32]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4TCzGY6z5qz4GQt for ; Mon, 15 Jan 2024 04:11:17 +0000 (UTC) (envelope-from marklmi@yahoo.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=yahoo.com header.s=s2048 header.b=ECmMmsyx; dmarc=pass (policy=reject) header.from=yahoo.com; spf=pass (mx1.freebsd.org: domain of marklmi@yahoo.com designates 98.137.64.32 as permitted sender) smtp.mailfrom=marklmi@yahoo.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1705291875; bh=E8x2VRgW9nVcg4hK/WmvlSEfKy4svsfOUkVuYU0Tscc=; h=From:Subject:Date:To:References:From:Subject:Reply-To; b=ECmMmsyxyl7l63ILldDZNRRR31kTPngfLgTAQHtZkYoNHGe3O60T6qiA9mDVF0MJ16Nx/BaWbq2Mov2mFAKTnyMwUwbpPO4hSTiUOJRaE1SfwKIaS5M0oqMK4W61EgP7RzMtpxa7jgpfQ7ivs/+hIccU4KzSijI5wwiNP9X6/bdxfd/GKlWpgy/Vanz4ykfrVsZyKEmn3vzd/JqTS21GTM5JZg/vff9xM26Cx/2sLxmOwiwi/V8QneSHXk1EgW11sWOA/RD2oonQld753rNyKUxZ3xB3f7CGOIF0UamV2w5gWt5m6g6khyAro/l/R5/Ln62s8TLwXOqupA/AWw7Epg== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1705291875; bh=yMW5cG3iCUlGDwyJU4QKEAcQB4Rm/d0Xd39vlRA1wWL=; h=X-Sonic-MF:From:Subject:Date:To:From:Subject; b=Y9Efo8PjoQrDFUw2XTZOOibigavqXaqEYQchz68/5NhwTmvceaeT80UKH08u3Kycb2FwRl1TF6lqp/POilW3SVBZ7IRqqFzPFN4wjabB2xtsl585mCva0Ye3EDBquX04BQYvexsD9P5RMwrMo2HprdqfZojA2973R+y5/lN3yg/uE73N8pviXrgTAWPMr4sYO1c5yAe9ICLpcEAd7o445AId03DrA/LJQQ04ARTG2QuyzfklQIQgU/+0Qr6pfdp+IsGIw4ecAXIi+vbm9V+J9AEF5mWz310Uk3u26sXRNjDTA+3hj6L398LTVF5xZ/rB0HqmwWi0Cs+OwPsB6Bl6Ag== X-YMail-OSG: 3tMuD2kVM1n7IiFbF5goXO1t28pCGxBG_jCrzzWMtpZLe9fpd4aZu2J8n3ZHb7x .ptw5kdbdd2WjYhQQjM7U1YvjC04I4zFeMnrmXWFhpjL.YYRoMCdBL4JkQnmBMYa.unvDNtJT8.y MZUfPuO6Cu4UQPCg2_OYbfqnxJC4P_FYhhMPifJwv0kijKcuq5MlC2MeKGNmcfzrpsMW7X2KngGg veJsXNfCrdPG2j7RQc.7zTWN7ew3dLWzn0ckySgGLkm7lHjuvVgslUdFVqWouea3md_SdwTvXHdc NYdLYlL_aVPBIbYxEiqZDn1j_LhzFWXQBDBdfuSkaz_JTZHKR9C5xBHPK4MX.GAdfhdQDXiedNRV UiPBiJn6yiHYynh2WPde1fa4TOZW7S7fClc.ZEKEosU.1avV1bw9bvtIDlBTy2Z9y15qGQg6_pcy a6XyEsW.VWJ3HlIKE8M2q94YwcdmbvgPThxz7arLfeFLkUAu0e0khF6D6dqzNNWBPq_.TnTfvDGr vbYyWz.pAiHpoc8BiOzfTcNsgnhMB.FR9obDJCTDuMZhwUe41lxzDx3ejugjYlNrVhUieWu4MXsS RfzNlWs2S8AFJJJn1XsySxMLt5eqj_jQit26BnWBjddACQNMI3DeXwfxvrHsgf_SecsEEDqtxbwg pSEDTyEdVpd_4vGiJhwsWilbDvSy1Eq2BzR_O_czcPygBVonbfExFOHr9UMpSzBO5Jf9bnPfv8yJ sw4zXCTysXzATfNHFKhzIqqUt969XHNU.Q.482Rk5eK_.jsdV47V89w6EoYlHJ73i82e1Boqrqc4 33WbG9XejDH78CyqoZ1RBmQ7lEJ7wU9PqMyBFujcPHGXWzRyrDycd_mmfdIfWsbhK6YfMuWoWeEx iW64P3kbydqVCecdMy_52LJjXRHNx1Oaq6BE5EbICW3wE4k6tIJSo_TLlma579Le9PkRqp6OExsP Y79AWtPzO6g1aX8lKD1PJ.AFP946yFnPzVumzOysGC0FfyG5WsoF754nR0sqmWzCn68hEC3f8EiF K_AlHN49FPPAGZpRxWF9PUiY6hyUbKNEoJtjGka6yUthO6qONSJU0Te0hgk1zet8fMpJHZxhLvfW TL5cwooqpJAAwOiDSqD3iPPVu.FZrnxaHKpnUtrpImSA9VVPxgJvPUToeSry0HPufT9wrD_OMqCp wZZUA9Li.GxQAZyCIoJED2We6FvjtbFy8_LIVAPf9Uw8HckP5AyuAHZ9UInZ.Z8GnHCqdqnpWqh3 NKvG1gfF8BTA0oKPCBqOoUZxe0MDcTQPpS7d7pjKi6APqp5ju9mdmlTJJj8_CkVbjD.gn7nLOErx .adrs8awfJth6YdUGbWPo0mne.OShKek0u9PHcx4axiZTXcVj6GqA.BVkLxOSNqXb5q.XLxRiN8X cmNGsGdoKQpM8EUFlflPKYWJ_7.xsJWaOKZ24H09cWwUmrRqJ3xlyAl4.KqKB3UA5uG5wsbosLLf WXmfL0SyzVgmaRZL1X5s.rgjHupivylEM00gQ6_arxgTvIE9DH.TBJEkopGLlU7ubitevcJ3TrnD tELB.MfGkVDe.gYGxl.ZIqCTvrgQ8CwnC0VcuOvcwRfTIHiXGBJTsHLMJuRwxp_G9THXdw7AFhUb lQ9cA0u8jKpkV27ZNXOFmCa2DyD5Fiap7Oxknj4tBDCndK0V7zjBemn49qN5lu3hYkawO41bASEZ Zk_eQrOSIM4eDbVHAo1d7siInUkprD1ZK9nnTr_3g3Ogupvd7vuD8MMRiC0sCWZRTay9j99wU22B 6ZArkc6ppqQIfk3asL4n7b0Qzo.XSyP15A68tPgwc1UJ7UYtKRBO1eJn.uJhy6qZl2FiCMjFxCSo d4e3yPF7vz6Fo7dj7hXCLjQ_o8wCi93cg9pE_T06g44Ni0AuigPs5l01klYcYO61l8btjWM3z.BR kLOemjL1Z1UZzuhPfaj7jKsmFqgs_Z5pZfXXJkusEw_7Q6PIHR4c0i6xjlo4G4IQaJP4x1OB_ueP jV7QZ5C5iSfD0h1ttx0FquPV5UqD30gamvSjovt8JuBoVqUHeYehBB_MoHB_M6uquwDo81U5GBb4 ZJjVCtDhyTGghD.xSfVBynqlrhZNWVxduqHen_fKQq4y9GI5dX7iaobxghXOzsbvvSQhEwX2BbbN 03iN4sniRGrFFn9d_orPgPnD2wqP7Pp5iJ74nnH.Pno0RSm8sryb2qoPW9_ZCndwVjCjQY1R8kp5 _6C9fIIA8Y6256QAg31cCwU4IHuZCViMQ568XIZohs63bBB1uN5ouSpAC3.ml1W1.y1DNp06N1A- - X-Sonic-MF: X-Sonic-ID: 44561aeb-89b3-459a-818a-98dfb1cb5982 Received: from sonic.gate.mail.ne1.yahoo.com by sonic307.consmr.mail.gq1.yahoo.com with HTTP; Mon, 15 Jan 2024 04:11:15 +0000 Received: by hermes--production-gq1-78d49cd6df-wz9pk (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 5e426d026906b7d913988b25a37308dd; Mon, 15 Jan 2024 04:11:13 +0000 (UTC) From: Mark Millard Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable List-Id: Technical discussions relating to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-hackers List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-hackers@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.300.61.1.2\)) Subject: Re: poudriere 3.4.0 regression: -i runs as NON_ROOT user Message-Id: <6376FF7E-6F3B-4558-94D0-4F5A4C82B916@yahoo.com> Date: Sun, 14 Jan 2024 20:11:02 -0800 To: leres@freebsd.org, FreeBSD Hackers X-Mailer: Apple Mail (2.3774.300.61.1.2) References: <6376FF7E-6F3B-4558-94D0-4F5A4C82B916.ref@yahoo.com> X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.50 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-0.999]; MV_CASE(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[yahoo.com,reject]; R_SPF_ALLOW(-0.20)[+ptr:yahoo.com]; R_DKIM_ALLOW(-0.20)[yahoo.com:s=s2048]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_TWO(0.00)[2]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; TO_DN_SOME(0.00)[]; ARC_NA(0.00)[]; DWL_DNSWL_NONE(0.00)[yahoo.com:dkim]; FREEMAIL_FROM(0.00)[yahoo.com]; FROM_HAS_DN(0.00)[]; ASN(0.00)[asn:36647, ipnet:98.137.64.0/20, country:US]; FREEMAIL_ENVFROM(0.00)[yahoo.com]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[yahoo.com:+]; MLMMJ_DEST(0.00)[freebsd-hackers@freebsd.org]; RWL_MAILSPIKE_POSSIBLE(0.00)[98.137.64.32:from]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[98.137.64.32:from] X-Rspamd-Queue-Id: 4TCzGY6z5qz4GQt Craig Leres wrote on Date: Mon, 15 Jan 2024 02:10:27 UTC : > On 1/14/24 14:07, Tomoaki AOKI wrote: > > IIRC, poudriere[-devel] ran as nobody (65534) initially, but it = started > > running as root (0) when I started using ccache. >=20 > Interesting. It's starting to sound to me as if there's just one bug;=20= > poudriere is not passing the correct value for UID to make. >=20 > I commented out CCACHE_DIR in my poudriere.conf and indeed things run = as=20 > user nobody. But looking at the build log I see UID is set to 0 in the=20= > environment. And I don't understand how poudriere does this ("ps e"=20 > doesn't show UID in the environment of any jail process). Looking in /usr/local/etc/poudriere.conf.sample I see: # Define to yes to build and stage as a regular user # Default: yes, unless CCACHE_DIR is set and CCACHE_DIR_NON_ROOT_SAFE is = not # set. Note that to use ccache with BUILD_AS_NON_ROOT you will need to # use a non-shared CCACHE_DIR that is only built by PORTBUILD_USER and = chowned # to that user. Then set CCACHE_DIR_NON_ROOT_SAFE to yes. #BUILD_AS_NON_ROOT=3Dno =3D=3D=3D Mark Millard marklmi at yahoo.com