I just noticed that firehol has no autopkgtests yet, but since ci.debian.net can run those under LXC/qemu instead of chroot this would allow for the test suite to run. It might however be a bit of a challenge to set that up at home if troubleshooting is needed.
Copying the one for root-unittests from firewalld seems like a good starting point: https://salsa.debian.org/utopia-team/firewalld/-/blob/debian/master/debian/tests/control The maintainer apparently faced a similar problem and disabled the test suite for buildd builds: https://salsa.debian.org/utopia-team/firewalld/-/commit/d24a8b8b5b29708c811bcad4b9885d1665875aca Maybe he'll be willing to help with setting this up. The autopkgtest probably will have to specify "needs-root" to set unprivileged_userns_clone=1 (unless the VM image already has that set up), but the test suite itself needn't run as root. Regards, Dennis.
