Package: buildd.debian.org Severity: serious Tags: patch Justification: likely to cause grave bugs in built binary packages X-Debbugs-Cc: debian-ad...@lists.debian.org
As discussed in <https://bugs.debian.org/913229> and the debian-devel thread starting at <https://lists.debian.org/debian-devel/2018/11/msg00299.html>, buildd chroots should not be generated with merged /usr. However, this is now the default in stretch-backports' debootstrap. Avoiding merged /usr for buildds mitigates a frequently-seen class of bugs in which packages end up with wrong executable paths hard-coded, for example /usr/bin/bash or /bin/apt-get (which would both work fine on a merged-/usr system, but not on an unmerged-/usr system). I attach an untested patch for the script in dsa-puppet that I think is currently responsible for generating buildd chroots. Several bugs involving wrong paths when a package is built on a merged-/usr system are tracked in <https://udd.debian.org/cgi-bin/bts-usertags.cgi?user=m...@linux.it&tag=usrmerge>. I'm also going to propose a patch for debootstrap to make --variant=buildd disable merged /usr by default. smcv
