Skip to content

Dockerfile.sdk-*: Disable Portage sandboxes during all image builds#4071

Open
chewi wants to merge 1 commit into
mainfrom
chewi/sdk-sandbox
Open

Dockerfile.sdk-*: Disable Portage sandboxes during all image builds#4071
chewi wants to merge 1 commit into
mainfrom
chewi/sdk-sandbox

Conversation

@chewi
Copy link
Copy Markdown
Contributor

@chewi chewi commented Jun 3, 2026

In #3955, I stopped disabling these sandboxes permanently, but they still need to be disabled temporarily during all the (unprivileged) image builds, not just Dockerfile.sdk-update.

How to use

Check for EPERM warnings during the SDK build.

Testing done

An SDK build in Jenkins made it to the packages job. I did find a single EPERM warning from Dockerfile.sdk-build when it breaks the dependency loops, but I stuck a declare -p FEATURES literally right before the emerge invocation, and it reported the expected value. It's not sudo masking the variable either. I can only guess that it's leftover state from /var/db/pkgs, which will go away with a further SDK build. One warning isn't a big deal anyway, and we were seeing a lot more than that before this change.

  • Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update) -- N/A
  • Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc. -- N/A

@chewi chewi self-assigned this Jun 3, 2026
@chewi chewi requested a review from a team as a code owner June 3, 2026 10:55
In #3955, I stopped disabling these sandboxes permanently, but they
still need to be disabled temporarily during all the (unprivileged)
image builds, not just Dockerfile.sdk-update.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
@chewi chewi force-pushed the chewi/sdk-sandbox branch from acc704a to f069ca6 Compare June 3, 2026 22:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant