Install blocked by `noexec` set on `/tmp` directory

Bug #1968366 reported by John Lettman
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
charm-duplicity
Won't Fix
Undecided
Unassigned

Bug Description

The `install` hook fails on clouds with CIS Hardening implemented due to the `/tmp` directory mount option "noexec".

When installing "fabric" via pip, the dependency "pynacl" fails during compilation. [0] This occurs because it is attempting to load a symbol from a shared object in the `/tmp` directory. This is a similar problem to bug 1935032.

The following modification to the command in the `install` hook works:
. /opt/juju_venvs/duplicity/bin/activate; TMPDIR=/var/lib/pip https_proxy=XXX pip install fabric

[0]: https://pastebin.canonical.com/p/nCXnqdCVSx/

Andrea Ieri (aieri)
description: updated
Revision history for this message
Eric Chen (eric-chen) wrote :
Changed in charm-duplicity:
status: New → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.