Merge ~alexmurray/ubuntu-security-tools:umt-ulimit-pkg-exceptions-override-as-unlimited into ubuntu-security-tools:master

[Alex Murray]

This came up due to libbluray failing to build for amurray and eslerm on kinetic (but suceeding for sarnold) - in this case just using a ulimit value of unlimited seems more appropriate. See https://chat.canonical.com/canonical/pl/zer47dqux3ds7kpesn3kooktxe for full back story.

[Mark Esler (eslerm)]

LGTM

review: Approve

[Seth Arnold (seth-arnold)]

The condition is getting a bit big, I wonder if we could more easily enumerate the negation of this if statement. The change looks fine, though, if you just want to leave it alone for now.

Thanks

review: Approve

[Alex Murray (alexmurray)]

Thanks for the review Seth - I broke up the if over multiple lines in https://git.launchpad.net/ubuntu-security-tools/commit/?id=ea324c9b15363c77809e31394358149f5bde8593 which should hopefully make it easier to maintain.

[Seth Arnold (seth-arnold)]

On Thu, Aug 11, 2022 at 02:36:05AM -0000, Alex Murray wrote:
> Thanks for the review Seth - I broke up the if over multiple lines in
> https://git.launchpad.net/ubuntu-security-tools/commit/?id=ea324c9b15363c77809e31394358149f5bde8593
> which should hopefully make it easier to maintain.

That'll definitely be easier to maintain, but I'm thinking more along the
lines of this (untested, not-quite-thought-out) version:

details['pkgbuild_ulimit_v'] = ulimit_pkg_exceptions[pkg_prefix] ||
    ust['pkgbuild_ulimit_v'] || 8 * 1024 * 1024 * 1024

I'm just hoping that there's an easier way to express the precedence for
where to get the setting.

Thanks

diff --git a/build-tools/umt b/build-tools/umt
index 603c412..222a32d 100755
--- a/build-tools/umt
+++ b/build-tools/umt
@@ -126,8 +126,8 @@ quirks['docker.io'] = [Quirk(quirk_docker_io_port_80,
                         'A process is already bound to port 80. It was found '
                         'that registry tests fail whenever this happens.')]
 
-# exceptions for creating a larger than normal ulimit when building.
-# keys are pkg name prefixes, values or the ulimit value.
+# exceptions for creating a larger than normal ulimit when building.  keys
+# are pkg name prefixes, values are the ulimit value
 ulimit_pkg_exceptions = {
     "gcc-": "3072000",
     "icedtea-web": "5242880",
@@ -136,7 +136,7 @@ ulimit_pkg_exceptions = {
     "openjdk-": "5242880",
     "passenger": "5242880",
     "tzdata": "5242880",
-    "libbluray": "5242880",
+    "libbluray": "unlimited",
 }
 
 
@@ -4138,7 +4138,7 @@ def parse_package_details(release = None, skip_sanity = False, force_component =
        details['pkgbuild_ulimit_v'] = ust['pkgbuild_ulimit_v']
     for pkg_prefix in ulimit_pkg_exceptions:
         if details['package'].startswith(pkg_prefix) and \
-           ('pkgbuild_ulimit_v' not in ust or ust['pkgbuild_ulimit_v'] == 'unlimited' or int(ust['pkgbuild_ulimit_v']) < int(ulimit_pkg_exceptions[pkg_prefix])):
+           ('pkgbuild_ulimit_v' not in ust or ust['pkgbuild_ulimit_v'] == 'unlimited' or ulimit_pkg_exceptions[pkg_prefix] == 'unlimited' or int(ust['pkgbuild_ulimit_v']) < int(ulimit_pkg_exceptions[pkg_prefix])):
             details['pkgbuild_ulimit_v'] = ulimit_pkg_exceptions[pkg_prefix]
 
     # TODO: Need -sa for partner section also