Comment 4 for bug 1789551

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

Cosmic:
PPA: https://launchpad.net/~ci-train-ppa-service/+archive/ubuntu/3390
Diff: https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_39a8dbb93caf4ec889f8a1b7f69885db/bileto-3390/2018-08-29_07:07:17/cosmic_qemu_content.diff

Upgraded a system to the new qemu:
The following packages will be upgraded:
  qemu-kvm qemu-system-ppc
2 upgraded, 0 newly installed, 0 to remove and 45 not upgraded.
Need to get 8421 kB of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 http://ppa.launchpad.net/ci-train-ppa-service/3390/ubuntu cosmic/main ppc64el qemu-kvm ppc64el 1:2.12+dfsg-3ubuntu5 [12.7 kB]
Get:2 http://ppa.launchpad.net/ci-train-ppa-service/3390/ubuntu cosmic/main ppc64el qemu-system-ppc ppc64el 1:2.12+dfsg-3ubuntu5 [8408 kB]
Fetched 8421 kB in 2s (3411 kB/s)
(Reading database ... 142908 files and directories currently installed.)
Preparing to unpack .../qemu-kvm_1%3a2.12+dfsg-3ubuntu5_ppc64el.deb ...
Unpacking qemu-kvm (1:2.12+dfsg-3ubuntu5) over (1:2.12+dfsg-3ubuntu4) ...
Preparing to unpack .../qemu-system-ppc_1%3a2.12+dfsg-3ubuntu5_ppc64el.deb ...
Unpacking qemu-system-ppc (1:2.12+dfsg-3ubuntu5) over (1:2.12+dfsg-3ubuntu4) ...
Setting up qemu-system-ppc (1:2.12+dfsg-3ubuntu5) ...
Setting up qemu-kvm (1:2.12+dfsg-3ubuntu5) ...
Processing triggers for man-db (2.8.4-2) ...

Manual check:
$ qemu-system-ppc64 -sandbox on -nographic & pid=$!; sleep 2s; echo PID $pid; for task in /proc/$pid/task/*; do cat $task/status | grep Secc; done; kill -9 $pid
[2] 31359

[2]+ Stopped qemu-system-ppc64 -sandbox on -nographic
PID 31359
Seccomp: 2
Seccomp: 2
Seccomp: 2

Libvirt started guest (with extended blakclist like -sandbox on,obsolete=deny,elevateprivileges=deny,spawn=deny,resourcecontrol=deny):
$ virsh list
 Id Name State
----------------------------------------------------
 2 b running

[1]+ Killed qemu-system-ppc64 -sandbox on -nographic

$ for pid in $(pidof qemu-system-ppc64); do echo PID $pid; for task in /proc/$pid/task/*; do cat $task/status | grep Secc; done; done
PID 31445
Seccomp: 2
Seccomp: 2
Seccomp: 2
Seccomp: 2
Seccomp: 2
Seccomp: 2
Seccomp: 2
Seccomp: 2
Seccomp: 2

Running regression tests on that PPA now which is slightly more interesting to set up than usual as we also need glibc from proposed to be installable ...