devscripts breaks apt

[sascha arthur]

Hello,

devscripts package seem to break apt installs.

using following Dockerfile:

FROM ubuntu:impish

ENV DEBIAN_FRONTEND noninteractive

RUN apt-get update -qq && apt-get install -y nano
RUN apt-get update -qq && apt-get install -y devscripts
RUN apt-get update -qq && apt-get install -y htop

docker build -t test .

Will break installing "htop" with random post apt install errors:

E: Problem executing scripts APT::Update::Post-Invoke 'rm -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb /var/cache/apt/*.bin || true'
E: Sub-process returned an error code

Excluding devscripts package will solve the issue.

Any idears why devscripts is breaking apt?

[Mattia Rizzolo (mapreri)]

from my (devscripts) side, no idea. also I have no clue how a command that has || in there can even "return an error code".

I'm strongly convinced there is nothing special in devscripts that could cause this, so I'm not considering it a bug in there.

[Julian Andres Klode (juliank)]

It's once again a bug in container seccomp policy, the new clone3() syscall in glibc 2.34 is being denied with EPERM instead of ENOSYS.

[Julian Andres Klode (juliank)]

See bug 1943049 for more details.