@gtronix I recently stumbled upon this as well in the context of #bitbake which also unshares to isolate tasks from each other (that's a security feature), which broke on #ubuntu 24.04. My fix was similar to what now is claimed as exploit (I'm using a more suitable profile though). The whole thing is just not thought through by Canonical.

https://github.com/siemens/kas/commit/a4055b04f735c58e55e740a984a53c0ac5b8c1f5#diff-b016dfce94047f5de14fc635f7fdf1da479f731263dac20c5ab946b5854c2de7R145

kas-container: add support for Ubuntu 24.04 hosts · siemens/kas@a4055b0

On Ubuntu 24.04 the default apparmor profile restricts unprivileged user namespaces. This breaks the bitbake execution, as bitbake uses this mechanism for network and uid isolation, resulting in th...

GitHub
Just upstreamed small fix to #bitbake in #yocto project.

During my work and life I make different changes/fixes to many #FLOSS systems. But for the last five years I had no enough something (not in the mood? too obsessed with other life issues?) to publish them. Hope, after this small step with yocto I'll continue with it and finally will contribute network-manager-l2tp to #guix, will re-send again my suggestions for #autoconf, share my fixes for obuspa, bash, repo-tool and other things where I made fixes but then just abandon them.
parse: Forbid ambiguous assignments to ${.}, ${+}, and ${:} variables - bitbake - Bitbake Development tree

@moreentropy I'm actually fine with processes running as root in an unprivileged Podman container because the root user inside the container is mapped to the user running Podman on the host which is sufficiently secure for my use cases. Some applications (looking at you, #Bitbake), however, refuse to run as UID 0. And that's the point where it gets funny. Not.
It's been sometime since I last messed with #bitbake (a long time ago in an embedded job far far away). While system build systems do do useful things its often very hard to find out what's going on deep down in their guts. So frustrating when trying to replicate and debug a #qemu bug.
@ross since I have your attention has anyone looked at sccache integration for #bitbake? Looks like it should be pretty straight forward leveraging the ccache and icecream plumbing that already exists.
> this would be my version of a logo for #BitBake
YouTube

https://github.com/cazfi/meta-games/pull/52# #Pinball recipe for building #game using #Bitbake for #OpenEmbedded #Yocto etc... note if you want to replace #X11 by #Wayland use master with #SDL2 support
pinball: Add version 0.3.20201218 by rzr · Pull Request #52 · cazfi/meta-games

Emilia Pinball libre pinball simulator for GNU/Linux Bug: #51 Origin: https://github.com/CrossStream/meta-games/tree/sandbox/rzr/review/master Relate-to: https://purl.org/rzr/pinball Change-Id: Ibf...

Bitbake の Hello World サンプルを試す - Qiita

Bitbake というのは Yocto Project で使われるビルド用のツールです。Make のように依存関係を調べて必要なタスクを行う仕組みです。文法が妙なのと、読み込まれるファイルが暗黙のうちに決まってとっつきにくいので、Bi...