fakeroot in nested jail

From: Marko Cupać <marko.cupac_at_mimar.rs>
Date: Mon, 15 Jul 2024 16:51:50 UTC
Hi,

I get the following errors when trying to build mail/sympa in poudriere
running inside a jail, but not when poudriere runs directly on host:

fakeroot daemon: socket (Protocol not supported)
fakeroot: error while starting the `faked' daemon.

All three of the host, top-level jail which runs poudriere, as well as
nested poudriere jail which builds ports run 14.1-RELEASE.

~1700 other ports build just fine. I filed PR in bugzilla, but port
maintainer can't reproduce the problem (doesn't have jailed poudriere
setup):

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=279572

Is there some allow.something, or other jail config directive which
would provide for fakeroot in a nested jail?

Here's complete jail.conf:

path            = "/home/jail/${host.hostname}";
exec.start      = "/bin/sh /etc/rc";
exec.stop       = "/bin/sh /etc/rc.shutdown";
exec.clean;
mount.devfs;

pkg2_example_org {
  host.hostname    = pkg2.example.org;
  host.domainname  = example.com;
  ip4.addr         = 'lo1|127.0.1.55/32';
  ip4.addr        += 'em0|192.0.2.55/32';
  ip6.addr        += 'lo1|::55/128';
  children.max     = 200;
  enforce_statfs   = 1;
  sysvmsg          = new;
  sysvsem          = new;
  sysvshm          = new;
  persist;
  allow.chflags;
  allow.mlock;
  allow.mount;
  allow.mount.devfs;
  allow.mount.fdescfs;
  allow.mount.nullfs;
  allow.mount.procfs;
  allow.mount.tmpfs;
  allow.mount.zfs;
  allow.raw_sockets;
  allow.socket_af;

  exec.created    += "zfs jail $name home/poudriere";
  exec.created    += "zfs set jailed=on home/poudriere";
}

-- 
Before enlightenment - chop wood, draw water.
After  enlightenment - chop wood, draw water.

Marko Cupać
https://www.mimar.rs/