Re: [gentoo-project] issues with network tests (within sandbox ?) at thte tinderbox

[Michał Górny]

On wto, 2017-07-04 at 22:47 +0200, Toralf Förster wrote:
> WRT https://bugs.gentoo.org/show_bug.cgi?id=623544#c8 I do wonder if I
> have an overlooked tinderbox problem with FEATURES=tests or whether
> there's a general (sandbox ?) network testing problem ?
>

Tests (or any specific ebuild activity) requiring or even optionally
using any external network interaction are forbidden. They should be
disarmed, removed or disabled by the ebuild.

However, connecting to localhost is fine as long as it doesn't connect
to any 'external' daemons, and the ebuild starts everything that's
needed.

To ensure both points, there's FEATURES=network-sandbox (we should
probably enable it by default soon). It creates a network namespace for
the process where it gets its private lo interface and nothing more.

For this particular case, it's some kind of gray area. It supposedly
needs only localhost but needs it to resolve using hostname. I guess
adding entry for the host to /etc/hosts would be enough to make it
happy.

-- 
Best regards,
Michał Górny