mmdebstrap: Show APT's dependency trace when in debug mode

A dependency trace is a powerful tool to debug issues related to APT's selection of packages, especially in custom mode. Thus it makes sense to ask APT to output a dependency trace when `mmdebstrap` is run with the `--debug` flag.
2022-03-15 11:08:14 +01:00
117 changed files with 3980 additions and 3822 deletions
--- a/.mailmap
+++ b/.mailmap
@ -1,2 +0,0 @@
 Johannes Schauer Marin Rodrigues <josch@mister-muffin.de>
 Johannes Schauer Marin Rodrigues <josch@mister-muffin.de> <j.schauer@email.de>
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -1,30 +1,3 @@
 1.1.0 (2022-07-26)
 ----------------
 - mount a new /dev/pts instance into the chroot to make posix_openpt work
 - adjust merged-/usr hook to work the same way as debootstrap
 - add no-merged-usr hook
 1.0.1 (2022-05-29)
 ------------------
 - bugfix release
 1.0.0 (2022-05-28)
 ------------------
 - all documented interfaces are now considered stable
 - allow file:// mirrors
 - /var/cache/apt/archives/ is now allowed to contain *.deb packages
 - add file-mirror-automount hook-dir
 - set $MMDEBSTRAP_VERBOSITY in hooks
 - rewrite coverage with multiple individual and skippable shell scripts
 0.8.6 (2022-03-25)
 ------------------
 - allow running root mode inside unshare mode
 0.8.5 (2022-03-07)
 ------------------
--- a/README.md
+++ b/README.md
@ -137,11 +137,6 @@ By default, `coverage.sh` will skip running a single test which tries creating
 a Ubuntu Focal chroot. To not skip that test, run `coverage.sh` with the
 environment variable `ONLINE=yes`.
 If a test fails you can run individual tests by executing `coverage.py` with
 the test name and optionally limit it to a specific distribution like so:
    CMD=./mmdebstrap ./coverage.py --dist unstable check-against-debootstrap-dist
 Bugs
 ====
--- a/coverage.py
+++ b/coverage.py
@ -1,296 +0,0 @@
 #!/usr/bin/env python3
 from debian.deb822 import Deb822, Release
 import email.utils
 import os
 import sys
 import shutil
 import subprocess
 import argparse
 import time
 from datetime import timedelta
 from collections import defaultdict
 have_qemu = os.getenv("HAVE_QEMU", "yes") == "yes"
 have_unshare = os.getenv("HAVE_UNSHARE", "yes") == "yes"
 have_binfmt = os.getenv("HAVE_BINFMT", "yes") == "yes"
 run_ma_same_tests = os.getenv("RUN_MA_SAME_TESTS", "yes") == "yes"
 cmd = os.getenv("CMD", "./mmdebstrap")
 default_dist = os.getenv("DEFAULT_DIST", "unstable")
 all_dists = ["oldstable", "stable", "testing", "unstable"]
 default_mode = "auto" if have_unshare else "root"
 all_modes = ["auto", "root", "unshare", "fakechroot", "chrootless"]
 default_variant = "apt"
 all_variants = [
    "extract",
    "custom",
    "essential",
    "apt",
    "minbase",
    "buildd",
    "-",
    "standard",
 ]
 default_format = "auto"
 all_formats = ["auto", "directory", "tar", "squashfs", "ext2", "null"]
 mirror = os.getenv("mirror", "http://127.0.0.1/debian")
 hostarch = subprocess.check_output(["dpkg", "--print-architecture"]).decode().strip()
 release_path = f"./shared/cache/debian/dists/{default_dist}/Release"
 if not os.path.exists(release_path):
    print("path doesn't exist:", release_path, file=sys.stderr)
    print("run ./make_mirror.sh first", file=sys.stderr)
    exit(1)
 if os.getenv("SOURCE_DATE_EPOCH") is not None:
    s_d_e = os.getenv("SOURCE_DATE_EPOCH")
 else:
    with open(release_path) as f:
        rel = Release(f)
    s_d_e = str(email.utils.mktime_tz(email.utils.parsedate_tz(rel["Date"])))
 separator = (
    "------------------------------------------------------------------------------"
 )
 def skip(condition, dist, mode, variant, fmt):
    if not condition:
        return ""
    for line in condition.splitlines():
        if not line:
            continue
        if eval(line):
            return line.strip()
    return ""
 def main():
    parser = argparse.ArgumentParser()
    parser.add_argument("test", nargs="*", help="only run these tests")
    parser.add_argument(
        "-x",
        "--exitfirst",
        action="store_const",
        dest="maxfail",
        const=1,
        help="exit instantly on first error or failed test.",
    )
    parser.add_argument(
        "--maxfail",
        metavar="num",
        action="store",
        type=int,
        dest="maxfail",
        default=0,
        help="exit after first num failures or errors.",
    )
    parser.add_argument("--mode", metavar="mode", help="only run tests with this mode")
    parser.add_argument("--dist", metavar="dist", help="only run tests with this dist")
    args = parser.parse_args()
    # copy over files from git or as distributed
    for (git, dist, target) in [
        ("./mmdebstrap", "/usr/bin/mmdebstrap", "mmdebstrap"),
        ("./taridshift", "/usr/bin/mmtaridshift", "taridshift"),
        ("./tarfilter", "/usr/bin/mmtarfilter", "tarfilter"),
        (
            "./proxysolver",
            "/usr/lib/apt/solvers/mmdebstrap-dump-solution",
            "proxysolver",
        ),
        (
            "./ldconfig.fakechroot",
            "/usr/libexec/mmdebstrap/ldconfig.fakechroot",
            "ldconfig.fakechroot",
        ),
    ]:
        if os.path.exists(git):
            shutil.copy(git, f"shared/{target}")
        else:
            shutil.copy(dist, f"shared/{target}")
    # copy over hooks from git or as distributed
    if os.path.exists("hooks"):
        shutil.copytree("hooks", "shared/hooks", dirs_exist_ok=True)
    else:
        shutil.copytree(
            "/usr/share/mmdebstrap/hooks", "shared/hooks", dirs_exist_ok=True
        )
    tests = []
    with open("coverage.txt") as f:
        for test in Deb822.iter_paragraphs(f):
            name = test["Test"]
            dists = test.get("Dists", default_dist)
            if dists == "any":
                dists = all_dists
            elif dists == "default":
                dists = [default_dist]
            else:
                dists = dists.split()
            modes = test.get("Modes", default_mode)
            if modes == "any":
                modes = all_modes
            elif modes == "default":
                modes = [default_mode]
            else:
                modes = modes.split()
            variants = test.get("Variants", default_variant)
            if variants == "any":
                variants = all_variants
            elif variants == "default":
                variants = [default_variant]
            else:
                variants = variants.split()
            formats = test.get("Formats", default_format)
            if formats == "any":
                formats = all_formats
            elif formats == "default":
                formats = [default_format]
            else:
                formats = formats.split()
            for dist in dists:
                for mode in modes:
                    for variant in variants:
                        for fmt in formats:
                            skipreason = skip(
                                test.get("Skip-If"), dist, mode, variant, fmt
                            )
                            if skipreason:
                                tt = ("skip", skipreason)
                            elif have_qemu:
                                tt = "qemu"
                            elif test.get("Needs-QEMU", "false") == "true":
                                tt = ("skip", "test needs QEMU")
                            elif test.get("Needs-Root", "false") == "true":
                                tt = "sudo"
                            elif mode == "auto" and not have_unshare:
                                tt = "sudo"
                            elif mode == "root":
                                tt = "sudo"
                            elif mode == "unshare" and not have_unshare:
                                tt = ("skip", "test needs unshare")
                            else:
                                tt = "null"
                            tests.append((tt, name, dist, mode, variant, fmt))
    torun = []
    num_tests = len(tests)
    if args.test:
        # check if all given tests are either a valid name or a valid number
        for test in args.test:
            if test in [name for (_, name, _, _, _, _) in tests]:
                continue
            if not test.isdigit():
                print(f"cannot find test named {test}", file=sys.stderr)
                exit(1)
            if int(test) >= len(tests) or int(test) <= 0 or str(int(test)) != test:
                print(f"test number {test} doesn't exist", file=sys.stderr)
                exit(1)
        for i, (_, name, _, _, _, _) in enumerate(tests):
            # if either the number or test name matches, then we use this test,
            # otherwise we skip it
            if name in args.test:
                torun.append(i)
            if str(i + 1) in args.test:
                torun.append(i)
        num_tests = len(torun)
    starttime = time.time()
    skipped = defaultdict(list)
    failed = []
    num_success = 0
    num_finished = 0
    for i, (test, name, dist, mode, variant, fmt) in enumerate(tests):
        if torun and i not in torun:
            continue
        print(separator, file=sys.stderr)
        print("(%d/%d) %s" % (i + 1, len(tests), name), file=sys.stderr)
        print("dist: %s" % dist, file=sys.stderr)
        print("mode: %s" % mode, file=sys.stderr)
        print("variant: %s" % variant, file=sys.stderr)
        print("format: %s" % fmt, file=sys.stderr)
        if num_finished > 0:
            currenttime = time.time()
            timeleft = timedelta(
                seconds=int(
                    (num_tests - num_finished)
                    * (currenttime - starttime)
                    / num_finished
                )
            )
            print("time left: %s" % timeleft, file=sys.stderr)
        if failed:
            print("failed: %d" % len(failed))
        num_finished += 1
        with open("tests/" + name) as fin, open("shared/test.sh", "w") as fout:
            for line in fin:
                line = line.replace("{{ CMD }}", cmd)
                line = line.replace("{{ SOURCE_DATE_EPOCH }}", s_d_e)
                line = line.replace("{{ DIST }}", dist)
                line = line.replace("{{ MIRROR }}", mirror)
                line = line.replace("{{ MODE }}", mode)
                line = line.replace("{{ VARIANT }}", variant)
                line = line.replace("{{ FORMAT }}", fmt)
                line = line.replace("{{ HOSTARCH }}", hostarch)
                fout.write(line)
        argv = None
        match test:
            case "qemu":
                argv = ["./run_qemu.sh"]
            case "sudo":
                argv = ["./run_null.sh", "SUDO"]
            case "null":
                argv = ["./run_null.sh"]
            case ("skip", reason):
                skipped[reason].append(
                    ("(%d/%d) %s" % (i + 1, len(tests), name), dist, mode, variant, fmt)
                )
                print(f"skipped because of {reason}", file=sys.stderr)
                continue
        print(separator, file=sys.stderr)
        if args.dist and args.dist != dist:
            print(f"skipping because of --dist={args.dist}", file=sys.stderr)
            continue
        if args.mode and args.mode != mode:
            print(f"skipping because of --mode={args.mode}", file=sys.stderr)
            continue
        proc = subprocess.Popen(argv)
        try:
            proc.wait()
        except KeyboardInterrupt:
            proc.terminate()
            proc.wait()
            break
        print(separator, file=sys.stderr)
        if proc.returncode != 0:
            failed.append(
                ("(%d/%d) %s" % (i + 1, len(tests), name), dist, mode, variant, fmt)
            )
            print("result: FAILURE", file=sys.stderr)
        else:
            print("result: SUCCESS", file=sys.stderr)
            num_success += 1
        if args.maxfail and len(failed) >= args.maxfail:
            break
    print(
        "successfully ran %d tests" % num_success,
        file=sys.stderr,
    )
    if skipped:
        print("skipped %d:" % sum([len(v) for v in skipped.values()]), file=sys.stderr)
        for reason, l in skipped.items():
            print(f"skipped because of {reason}:", file=sys.stderr)
            for t in l:
                print(f"    {t}", file=sys.stderr)
    if failed:
        print("failed %d:" % len(failed), file=sys.stderr)
        for t in failed:
            print(f"    {t}", file=sys.stderr)
        exit(1)
 if __name__ == "__main__":
    main()
--- a/coverage.sh
+++ b/coverage.sh
--- a/coverage.txt
+++ b/coverage.txt
@ -1,324 +0,0 @@
 Test: check-against-debootstrap-dist
 Dists: any
 Variants: minbase buildd -
 Needs-Root: true
 Test: as-debootstrap-unshare-wrapper
 Needs-QEMU: true
 Test: help
 Test: man
 Test: version
 Test: create-directory
 Needs-Root: true
 Test: unshare-as-root-user
 Needs-Root: true
 Test: dist-using-codename
 Dists: any
 Test: fail-without-etc-subuid
 Needs-QEMU: true
 Test: fail-without-username-in-etc-subuid
 Needs-QEMU: true
 Test: unshare-as-root-user-inside-chroot
 Needs-Root: true
 Test: root-mode-inside-chroot
 Needs-Root: true
 Test: root-mode-inside-unshare-chroot
 Needs-QEMU: true
 Test: root-without-cap-sys-admin
 Needs-Root: true
 Test: mount-is-missing
 Needs-QEMU: true
 Test: check-for-bit-by-bit-identical-format-output
 Needs-QEMU: true
 Formats: tar squashfs ext2
 Variants: essential apt minbase buildd important standard
 Skip-If:
 variant == "standard" and dist in ["oldstable", "stable"] # #864082, #1004557, #1004558
 variant == "important" and dist == "oldstable" # /var/lib/systemd/catalog/database differs
 fmt == "squashfs" and dist == "oldstable" # squashfs-tools-ng is not available
 fmt == "ext2" and dist == "oldstable" # genext2fs does not support SOURCE_DATE_EPOCH
 Test: taridshift-utility
 Needs-QEMU: true
 Skip-If: dist == "oldstable" # python3 tarfile module does not preserve xattrs
 Test: progress-bars-on-fake-tty
 Test: debug-output-on-fake-tty
 Test: existing-empty-directory
 Needs-Root: true
 Test: existing-directory-with-lost-found
 Needs-Root: true
 Test: fail-installing-to-non-empty-lost-found
 Test: fail-installing-to-non-empty-target-directory
 Test: missing-device-nodes-outside-the-chroot
 Needs-QEMU: true
 Test: missing-dev-sys-proc-inside-the-chroot
 Needs-QEMU: true
 Test: chroot-directory-not-accessible-by-apt-user
 Needs-Root: true
 Test: cwd-directory-not-accessible-by-unshared-user
 Needs-QEMU: true
 Test: create-gzip-compressed-tarball
 Needs-QEMU: true
 Test: custom-tmpdir
 Needs-QEMU: true
 Test: xz-compressed-tarball
 Test: directory-ending-in-tar
 Modes: root
 Needs-Root: true
 Test: auto-mode-without-unshare-capabilities
 Needs-QEMU: true
 Test: fail-with-missing-lz4
 Test: fail-with-path-with-quotes
 Test: create-tarball-with-tmp-mounted-nodev
 Needs-QEMU: true
 Test: read-from-stdin-write-to-stdout
 Test: supply-components-manually
 Modes: root
 Needs-Root: true
 Test: stable-default-mirror
 Needs-QEMU: true
 Test: pass-distribution-but-implicitly-write-to-stdout
 Needs-QEMU: true
 Test: aspcud-apt-solver
 Test: mirror-is-stdin
 Test: copy-mirror
 Needs-QEMU: true
 Test: file-mirror
 Needs-QEMU: true
 Test: file-mirror-automount-hook
 Modes: root unshare fakechroot
 Needs-QEMU: true
 Test: mirror-is-deb
 Test: mirror-is-real-file
 Test: deb822-1-2
 Modes: root
 Needs-Root: true
 Test: deb822-2-2
 Modes: root
 Needs-Root: true
 Test: automatic-mirror-from-suite
 Needs-QEMU: true
 Test: invalid-mirror
 Test: fail-installing-to-root
 Modes: root
 Needs-Root: true
 Test: fail-installing-to-existing-file
 Modes: root
 Needs-Root: true
 Test: arm64-without-qemu-support
 Needs-QEMU: true
 Skip-If: hostarch != "amd64"
 Test: i386-which-can-be-executed-without-qemu
 Needs-QEMU: true
 Skip-If:
 hostarch != "amd64"
 not run_ma_same_tests
 Test: include-libmagic-mgc-arm64
 Needs-Root: true
 Skip-If:
 hostarch != "amd64"
 not run_ma_same_tests
 Test: include-libmagic-mgc-arm64-with-multiple-arch-options
 Needs-Root: true
 Skip-If:
 hostarch != "amd64"
 not run_ma_same_tests
 Test: aptopt
 Needs-Root: true
 Test: keyring
 Needs-QEMU: true
 Test: keyring-overwrites
 Needs-Root: true
 Test: signed-by-without-host-keys
 Needs-QEMU: true
 Test: ascii-armored-keys
 Needs-QEMU: true
 Test: signed-by-with-host-keys
 Needs-Root: true
 Test: dpkgopt
 Needs-Root: true
 Test: include
 Needs-Root: true
 Test: multiple-include
 Needs-Root: true
 Test: include-with-multiple-apt-sources
 Needs-Root: true
 Test: merged-usr-via-setup-hook
 Needs-Root: true
 Test: essential-hook
 Needs-Root: true
 Test: customize-hook
 Needs-Root: true
 Test: failing-customize-hook
 Needs-Root: true
 Test: sigint-during-customize-hook
 Needs-Root: true
 Test: hook-directory
 Needs-Root: true
 Test: eatmydata-via-hook-dir
 Needs-Root: true
 Test: special-hooks-using-helpers
 Needs-Root: true
 Test: special-hooks-using-helpers-and-env-vars
 Needs-Root: true
 Test: special-hooks-with-mode-mode
 Modes: root unshare fakechroot
 Needs-QEMU: true
 Test: debootstrap-no-op-options
 Needs-Root: true
 Test: verbose
 Needs-Root: true
 Test: debug
 Needs-Root: true
 Test: quiet
 Needs-Root: true
 Test: logfile
 Needs-Root: true
 Test: without-etc-resolv-conf-and-etc-hostname
 Needs-QEMU: true
 Test: preserve-mode-of-etc-resolv-conf-and-etc-hostname
 Modes: root
 Needs-QEMU: true
 Test: not-having-to-install-apt-in-include-because-a-hook-did-it-before
 Test: remove-start-stop-daemon-and-policy-rc-d-in-hook
 Test: compare-output-with-pre-seeded-var-cache-apt-archives
 Needs-QEMU: true
 Variants: any
 Skip-If:
 variant == "standard" and dist in ["oldstable", "stable"] # #864082, #1004557, #1004558
 variant == "important" and dist == "oldstable" # /var/lib/systemd/catalog/database differs
 Test: create-directory-dry-run
 Test: create-tarball-dry-run
 Variants: any
 Modes: any
 Test: unpack-doc-debian
 Needs-QEMU: true
 Modes: any
 Variants: extract
 Test: install-doc-debian
 Modes: chrootless
 Variants: custom
 Test: install-known-good-from-essential-yes
 Variants: custom
 Modes: chrootless
 Skip-If:
 True # #1006692
 dist in ["oldstable", "stable"]
 Test: install-doc-debian-and-output-tarball
 Variants: custom
 Modes: chrootless
 Test: install-doc-debian-and-test-hooks
 Variants: custom
 Modes: chrootless
 Test: install-libmagic-mgc-on-arm64
 Skip-If:
 hostarch != "amd64"
 not have_binfmt
 Test: install-busybox-based-sub-essential-system
 Needs-Root: true
 Test: create-arm64-tarball
 Modes: root unshare fakechroot
 Skip-If:
 hostarch != "amd64"
 mode == "fakechroot" and not run_ma_same_tests
 not have_binfmt
 Test: no-sbin-in-path
 Modes: fakechroot
 Test: dev-ptmx
 Modes: root unshare
 Needs-QEMU: true
--- a/hooks/busybox/extract00.sh
+++ b/hooks/busybox/extract00.sh
@ -1,10 +1,6 @@
 #!/bin/sh
-set -eu
+set -exu
 if [ "$MMDEBSTRAP_VERBOSITY" -ge 3 ]; then
 	set -x
 fi
 rootdir="$1"
--- a/hooks/busybox/setup00.sh
+++ b/hooks/busybox/setup00.sh
@ -1,10 +1,6 @@
 #!/bin/sh
-set -eu
+set -exu
 if [ "$MMDEBSTRAP_VERBOSITY" -ge 3 ]; then
 	set -x
 fi
 rootdir="$1"
--- a/hooks/eatmydata/customize.sh
+++ b/hooks/eatmydata/customize.sh
@ -1,10 +1,6 @@
 #!/bin/sh
-set -eu
+set -exu
 if [ "$MMDEBSTRAP_VERBOSITY" -ge 3 ]; then
 	set -x
 fi
 rootdir="$1"
--- a/hooks/eatmydata/extract.sh
+++ b/hooks/eatmydata/extract.sh
@ -1,10 +1,6 @@
 #!/bin/sh
-set -eu
+set -exu
 if [ "$MMDEBSTRAP_VERBOSITY" -ge 3 ]; then
 	set -x
 fi
 rootdir="$1"
@ -29,7 +25,7 @@ END
 # nothing will be printed for them
 tmpdir=$(mktemp --directory --tmpdir="$rootdir/tmp")
 env --chdir="$tmpdir" APT_CONFIG="$tmpfile" apt-get download --print-uris eatmydata libeatmydata1 \
-	| sed -ne "s/^'\([^']\+\)'\s\+\(\S\+\)\s\+\([0-9]\+\)\s\+\(SHA256:[a-f0-9]\+\)$/\1 \2 \3 \4/p" \
+	| sed -ne "s/^'\([^']\+\)'\s\+\([^\s]\+\)\s\+\([0-9]\+\)\s\+\(SHA256:[a-f0-9]\+\)$/\1 \2 \3 \4/p" \
 	| while read uri fname size hash; do
 		echo "processing $fname" >&2
 		if [ -e "$tmpdir/$fname" ]; then
--- a/hooks/file-mirror-automount/customize00.sh
+++ b/hooks/file-mirror-automount/customize00.sh
@ -1,39 +0,0 @@
 #!/bin/sh
 set -eu
 if [ "$MMDEBSTRAP_VERBOSITY" -ge 3 ]; then
 	set -x
 fi
 rootdir="$1"
 if [ ! -e "$rootdir/run/mmdebstrap/file-mirror-automount" ]; then
 	exit 0
 fi
 xargsopts="--null --no-run-if-empty -I {} --max-args=1"
 case $MMDEBSTRAP_MODE in
 	root|unshare)
 		echo "unmounting the following mountpoints:" >&2 ;;
 	*)
 		echo "removing the following directories:" >&2 ;;
 esac
 cat "$rootdir/run/mmdebstrap/file-mirror-automount" \
 	| xargs $xargsopts echo "    $rootdir/{}"
 case $MMDEBSTRAP_MODE in
 	root|unshare)
 		cat "$rootdir/run/mmdebstrap/file-mirror-automount" \
 			| xargs $xargsopts umount "$rootdir/{}"
 		;;
 	*)
 		cat "$rootdir/run/mmdebstrap/file-mirror-automount" \
 			| xargs $xargsopts rm -r "$rootdir/{}"
 		;;
 esac
 rm "$rootdir/run/mmdebstrap/file-mirror-automount"
 rmdir --ignore-fail-on-non-empty "$rootdir/run/mmdebstrap"
--- a/hooks/file-mirror-automount/setup00.sh
+++ b/hooks/file-mirror-automount/setup00.sh
@ -1,29 +0,0 @@
 #!/bin/sh
 set -eu
 if [ "$MMDEBSTRAP_VERBOSITY" -ge 3 ]; then
 	set -x
 fi
 rootdir="$1"
 env APT_CONFIG=$MMDEBSTRAP_APT_CONFIG apt-get indextargets --no-release-info --format '$(REPO_URI)' \
 	| sed -ne 's/^file:\/\+//p' \
 	| sort -u \
 	| while read path; do
 		mkdir -p "$rootdir/run/mmdebstrap"
 		case $MMDEBSTRAP_MODE in
 			root|unshare)
 				echo "bind-mounting /$path into the chroot" >&2
 				mkdir -p "$rootdir/$path"
 				mount -o ro,bind "/$path" "$rootdir/$path"
 				;;
 			*)
 				echo "copying /$path into the chroot" >&2
 				mkdir -p "$rootdir/$(dirname $path)"
 				cp -av "/$path" "$rootdir/$(dirname $path)"
 				;;
 		esac
 		printf '/%s\0' "$path" >> "$rootdir/run/mmdebstrap/file-mirror-automount"
 	done
--- a/hooks/merged-usr/essential00.sh
+++ b/hooks/merged-usr/essential00.sh
@ -1,15 +0,0 @@
 #!/bin/sh
 set -eu
 if [ "$MMDEBSTRAP_VERBOSITY" -ge 3 ]; then
        set -x
 fi
 TARGET="$1"
 APT_CONFIG=$MMDEBSTRAP_APT_CONFIG apt-get --yes install -oDPkg::Chroot-Directory="$TARGET" usr-is-merged
 chroot "$TARGET" dpkg-query --showformat '${db:Status-Status}\n' --show usr-is-merged | grep -q '^installed$'
 chroot "$TARGET" dpkg-query --showformat '${Source}\n' --show usr-is-merged | grep -q '^usrmerge$'
 dpkg --compare-versions "1" "lt" "$(chroot "$TARGET" dpkg-query --showformat '${Version}\n' --show usr-is-merged)"
--- a/hooks/merged-usr/setup00.sh
+++ b/hooks/merged-usr/setup00.sh
@ -39,21 +39,22 @@
 # out merged-/usr is bad from the dpkg point-of-view and completely opposite of
 # the vision with which in mind I wrote mmdebstrap.
-set -eu
+set -exu
 if [ "$MMDEBSTRAP_VERBOSITY" -ge 3 ]; then
 	set -x
 fi
 TARGET="$1"
-ARCH=$(dpkg --print-architecture)
+if [ -e "$TARGET/var/lib/dpkg/arch" ]; then
-eval "$(APT_CONFIG="$MMDEBSTRAP_APT_CONFIG" apt-config shell ARCH Apt::Architecture)"
+	ARCH=$(head -1 "$TARGET/var/lib/dpkg/arch")
 else
 	ARCH=$(dpkg --print-architecture)
 fi
 if [ -e /usr/share/debootstrap/functions ]; then
 	. /usr/share/debootstrap/functions
 	doing_variant () { [ $1 != "buildd" ]; }
 	MERGED_USR="yes"
 	# until https://salsa.debian.org/installer-team/debootstrap/-/merge_requests/48 gets merged
 	link_dir=""
 	setup_merged_usr
 else
 	link_dir=""
@ -78,34 +79,3 @@ else
 		mkdir -p "$TARGET/usr/$dir"
 	done
 fi
 # now install an empty "usr-is-merged" package to avoid installing the
 # usrmerge package on this system even after init-system-helpers starts
 # depending on "usrmerge | usr-is-merged".
 #
 # This package will not end up in the final chroot because the essential
 # hook replaces it with the actual usr-is-merged package from src:usrmerge.
 tmpdir=$(mktemp --directory --tmpdir="$TARGET/tmp")
 mkdir -p "$tmpdir/usr-is-merged/DEBIAN"
 cat << END > "$tmpdir/usr-is-merged/DEBIAN/control"
 Package: usr-is-merged
 Priority: optional
 Section: oldlibs
 Maintainer: Johannes Schauer Marin Rodrigues <josch@debian.org>
 Architecture: all
 Multi-Arch: foreign
 Source: mmdebstrap-dummy-usr-is-merged
 Version: 1
 Description: dummy package created by mmdebstrap merged-usr setup hook
 This package was generated and installed by the mmdebstrap merged-usr
 setup hook at /usr/share/mmdebstrap/hooks/merged-usr.
 .
 If this package is installed in the final chroot, then this is a bug
 in mmdebstrap. Please report: https://gitlab.mister-muffin.de/josch/mmdebstrap
 END
 dpkg-deb --build "$tmpdir/usr-is-merged" "$tmpdir/usr-is-merged.deb"
 dpkg --root="$TARGET" --log="$TARGET/var/log/dpkg.log" --install "$tmpdir/usr-is-merged.deb"
 rm "$tmpdir/usr-is-merged.deb" "$tmpdir/usr-is-merged/DEBIAN/control"
 rmdir "$tmpdir/usr-is-merged/DEBIAN" "$tmpdir/usr-is-merged" "$tmpdir"
--- a/hooks/no-merged-usr/essential00.sh
+++ b/hooks/no-merged-usr/essential00.sh
@ -1,15 +0,0 @@
 #!/bin/sh
 set -eu
 if [ "$MMDEBSTRAP_VERBOSITY" -ge 3 ]; then
        set -x
 fi
 TARGET="$1"
 APT_CONFIG=$MMDEBSTRAP_APT_CONFIG apt-get --yes install -oDPkg::Chroot-Directory="$TARGET" usr-is-merged
 chroot "$TARGET" dpkg-query --showformat '${db:Status-Status}\n' --show usr-is-merged | grep -q '^installed$'
 chroot "$TARGET" dpkg-query --showformat '${Source}\n' --show usr-is-merged | grep -q '^usrmerge$'
 dpkg --compare-versions "1" "lt" "$(chroot "$TARGET" dpkg-query --showformat '${Version}\n' --show usr-is-merged)"
--- a/hooks/no-merged-usr/setup00.sh
+++ b/hooks/no-merged-usr/setup00.sh
@ -1,53 +0,0 @@
 #!/bin/sh
 #
 # mmdebstrap does have a --no-merged-usr option but only as a no-op for
 # debootstrap compatibility
 #
 # Using this hook script, you can emulate what debootstrap does to set up
 # a system without merged-/usr even after the essential init-system-helpers
 # package added a dependency on "usrmerge | usr-is-merged". By installing
 # a dummy usr-is-merged package, it avoids pulling in the dependencies of
 # the usrmerge package.
 set -eu
 if [ "$MMDEBSTRAP_VERBOSITY" -ge 3 ]; then
        set -x
 fi
 TARGET="$1"
 echo "Warning: starting with Debian 12 (Bookworm), systems without merged-/usr are not supported anymore" >&2
 echo "this system will not be supported in the future" > "$TARGET/etc/unsupported-skip-usrmerge-conversion"
 # now install an empty "usr-is-merged" package to avoid installing the
 # usrmerge package on this system even after init-system-helpers starts
 # depending on "usrmerge | usr-is-merged".
 #
 # This package will not end up in the final chroot because the essential
 # hook replaces it with the actual usr-is-merged package from src:usrmerge.
 tmpdir=$(mktemp --directory --tmpdir="$TARGET/tmp")
 mkdir -p "$tmpdir/usr-is-merged/DEBIAN"
 cat << END > "$tmpdir/usr-is-merged/DEBIAN/control"
 Package: usr-is-merged
 Priority: optional
 Section: oldlibs
 Maintainer: Johannes Schauer Marin Rodrigues <josch@debian.org>
 Architecture: all
 Multi-Arch: foreign
 Source: mmdebstrap-dummy-usr-is-merged
 Version: 1
 Description: dummy package created by mmdebstrap no-merged-usr setup hook
 This package was generated and installed by the mmdebstrap no-merged-usr
 setup hook at /usr/share/mmdebstrap/hooks/no-merged-usr.
 .
 If this package is installed in the final chroot, then this is a bug
 in mmdebstrap. Please report: https://gitlab.mister-muffin.de/josch/mmdebstrap
 END
 dpkg-deb --build "$tmpdir/usr-is-merged" "$tmpdir/usr-is-merged.deb"
 dpkg --root="$TARGET" --log="$TARGET/var/log/dpkg.log" --install "$tmpdir/usr-is-merged.deb"
 rm "$tmpdir/usr-is-merged.deb" "$tmpdir/usr-is-merged/DEBIAN/control"
 rmdir "$tmpdir/usr-is-merged/DEBIAN" "$tmpdir/usr-is-merged" "$tmpdir"
--- a/make_mirror.sh
+++ b/make_mirror.sh
@ -266,13 +266,6 @@ END
 	pkgs="$(echo $pkgs) build-essential busybox gpg eatmydata"
 	# we need usr-is-merged to simulate debootstrap behaviour for all dists
 	# starting from Debian 12 (Bullseye)
 	case "$dist" in
 		oldstable|stable) : ;;
 		*) pkgs="$pkgs usr-is-merged" ;;
 	esac
 	APT_CONFIG="$rootdir/etc/apt/apt.conf" apt-get --yes install $pkgs
 	# to be able to also test gpg verification, we need to create a mirror
@ -629,7 +622,7 @@ END
 	# buildd variant will not be 400MB but 1.3GB large and needs a 10G
 	# disk.
 	if [ -z ${DISK_SIZE+x} ]; then
-		DISK_SIZE=10G
+		DISK_SIZE=3G
 	fi
 	guestfish -N "$tmpdir/debian-$DEFAULT_DIST.img"=disk:$DISK_SIZE -- \
 		part-disk /dev/sda mbr : \
@ -661,23 +654,15 @@ fi
 mirror="http://127.0.0.1/debian"
 for dist in oldstable stable testing unstable; do
 	for variant in minbase buildd -; do
-		echo "running debootstrap --variant=$variant $dist \${TEMPDIR} $mirror"
+		echo "running debootstrap --no-merged-usr --variant=$variant $dist \${TEMPDIR} $mirror"
 		cat << END > shared/test.sh
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 export SOURCE_DATE_EPOCH=$SOURCE_DATE_EPOCH
 echo "SOURCE_DATE_EPOCH=\$SOURCE_DATE_EPOCH"
 tmpdir="\$(mktemp -d)"
 chmod 755 "\$tmpdir"
-case "$dist" in
+debootstrap --no-merged-usr --variant=$variant $dist "\$tmpdir" $mirror
 	oldstable|stable)
 		debootstrap --no-merged-usr --variant=$variant $dist "\$tmpdir" $mirror
 		;;
 	*)
 		debootstrap --merged-usr --variant=$variant $dist "\$tmpdir" $mirror
 		;;
 esac
 tar --sort=name --mtime=@$SOURCE_DATE_EPOCH --clamp-mtime --numeric-owner --one-file-system --xattrs -C "\$tmpdir" -c . > "$newcache/debian-$dist-$variant.tar"
 rm -r "\$tmpdir"
 END
--- a/740
+++ b/740
--- a/run_qemu.sh
+++ b/run_qemu.sh
@ -31,10 +31,9 @@ qemu-img create -f qcow2 -b "$(realpath $cachedir)/debian-$DEFAULT_DIST.qcow" -F
 # to connect to serial use:
 #   minicom -D 'unix#/tmp/ttyS0'
 ret=0
-timeout --foreground 20m qemu-system-x86_64 \
+timeout 20m qemu-system-x86_64 \
 	-cpu host \
 	-no-user-config \
-	-M accel=kvm:tcg -m 4G -nographic \
+	-M accel=kvm:tcg -m 1G -nographic \
 	-object rng-random,filename=/dev/urandom,id=rng0 -device virtio-rng-pci,rng=rng0 \
 	-monitor unix:/tmp/monitor,server,nowait \
 	-serial unix:/tmp/ttyS0,server,nowait \
--- a/tests/aptopt
+++ b/tests/aptopt
@ -1,9 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot; rm -f /tmp/config" EXIT INT TERM
 echo 'Acquire::Languages "none";' > /tmp/config
 {{ CMD }} --mode=root --variant=apt --aptopt='Acquire::Check-Valid-Until "false"' --aptopt=/tmp/config {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 printf 'Acquire::Check-Valid-Until "false";\nAcquire::Languages "none";\n' | cmp /tmp/debian-chroot/etc/apt/apt.conf.d/99mmdebstrap -
 rm /tmp/debian-chroot/etc/apt/apt.conf.d/99mmdebstrap
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
--- a/tests/arm64-without-qemu-support
+++ b/tests/arm64-without-qemu-support
@ -1,18 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 apt-get remove --yes qemu-user-static binfmt-support qemu-user
 # the following is not necessary anymore since systemd-binfmt
 # successfully disables support upon removal of qemu-user with
 # the upload of src:systemd 251.2-4: https://bugs.debian.org/1012163
 #echo 0 > /proc/sys/fs/binfmt_misc/qemu-aarch64
 ret=0
 {{ CMD }} --mode={{ MODE }} --variant=apt --architectures=arm64 {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }} || ret=$?
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
--- a/tests/as-debootstrap-unshare-wrapper
+++ b/tests/as-debootstrap-unshare-wrapper
@ -1,71 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 export SOURCE_DATE_EPOCH={{ SOURCE_DATE_EPOCH }}
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 sysctl -w kernel.unprivileged_userns_clone=1
 adduser --gecos user --disabled-password user
 runuser -u user -- {{ CMD }} --variant=custom --mode=unshare --setup-hook='env container=lxc debootstrap unstable "$1" {{ MIRROR }}' - /tmp/debian-mm.tar {{ MIRROR }}
 mkdir /tmp/debian-mm
 tar --xattrs --xattrs-include='*' -C /tmp/debian-mm -xf /tmp/debian-mm.tar
 mkdir /tmp/debian-debootstrap
 tar --xattrs --xattrs-include='*' -C /tmp/debian-debootstrap -xf "cache/debian-unstable--.tar"
 # diff cannot compare device nodes, so we use tar to do that for us and then
 # delete the directory
 tar -C /tmp/debian-debootstrap -cf dev1.tar ./dev
 tar -C /tmp/debian-mm -cf dev2.tar ./dev
 cmp dev1.tar dev2.tar
 rm dev1.tar dev2.tar
 rm -r /tmp/debian-debootstrap/dev /tmp/debian-mm/dev
 # remove downloaded deb packages
 rm /tmp/debian-debootstrap/var/cache/apt/archives/*.deb
 # remove aux-cache
 rm /tmp/debian-debootstrap/var/cache/ldconfig/aux-cache
 # remove logs
 rm /tmp/debian-debootstrap/var/log/dpkg.log \
 	/tmp/debian-debootstrap/var/log/bootstrap.log \
 	/tmp/debian-debootstrap/var/log/alternatives.log \
 	/tmp/debian-mm/var/log/bootstrap.log
 # debootstrap doesn't clean apt
 rm /tmp/debian-debootstrap/var/lib/apt/lists/127.0.0.1_debian_dists_unstable_main_binary-{{ HOSTARCH }}_Packages \
 	/tmp/debian-debootstrap/var/lib/apt/lists/127.0.0.1_debian_dists_unstable_Release \
 	/tmp/debian-debootstrap/var/lib/apt/lists/127.0.0.1_debian_dists_unstable_Release.gpg
 rm /tmp/debian-debootstrap/etc/machine-id /tmp/debian-mm/etc/machine-id
 rm /tmp/debian-mm/var/cache/apt/archives/lock
 rm /tmp/debian-mm/var/lib/apt/lists/lock
 # check if the file content differs
 diff --no-dereference --recursive /tmp/debian-debootstrap /tmp/debian-mm
 # check permissions, ownership, symlink targets, modification times using tar
 # mtimes of directories created by mmdebstrap will differ, thus we equalize them first
 for d in etc/apt/preferences.d/ etc/apt/sources.list.d/ etc/dpkg/dpkg.cfg.d/ var/log/apt/; do
 	touch --date="@{{ SOURCE_DATE_EPOCH }}" /tmp/debian-debootstrap/$d /tmp/debian-mm/$d
 done
 # debootstrap never ran apt -- fixing permissions
 for d in ./var/lib/apt/lists/partial ./var/cache/apt/archives/partial; do
 	chroot /tmp/debian-debootstrap chmod 0700 $d
 	chroot /tmp/debian-debootstrap chown _apt:root $d
 done
 tar -C /tmp/debian-debootstrap --numeric-owner --xattrs --xattrs-include='*' --sort=name --clamp-mtime --mtime=$(date --utc --date=@{{ SOURCE_DATE_EPOCH }} --iso-8601=seconds) -cf /tmp/root1.tar .
 tar -C /tmp/debian-mm --numeric-owner --xattrs --xattrs-include='*' --sort=name --clamp-mtime --mtime=$(date --utc --date=@{{ SOURCE_DATE_EPOCH }} --iso-8601=seconds) -cf /tmp/root2.tar .
 tar --full-time --verbose -tf /tmp/root1.tar > /tmp/root1.tar.list
 tar --full-time --verbose -tf /tmp/root2.tar > /tmp/root2.tar.list
 # despite SOURCE_DATE_EPOCH and --clamp-mtime, the timestamps in the tarball
 # will slightly differ from each other in the sub-second precision (last
 # decimals) so the tarballs will not be identical, so we use diff to compare
 # content and tar to compare attributes
 diff -u /tmp/root1.tar.list /tmp/root2.tar.list
 rm /tmp/root1.tar /tmp/root2.tar /tmp/root1.tar.list /tmp/root2.tar.list
 rm /tmp/debian-mm.tar
 rm -r /tmp/debian-debootstrap /tmp/debian-mm
--- a/tests/ascii-armored-keys
+++ b/tests/ascii-armored-keys
@ -1,18 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 for f in /usr/share/keyrings/*.gpg; do
 	name=$(basename "$f" .gpg)
 	gpg --enarmor < /usr/share/keyrings/$name.gpg \
 		| sed 's/ PGP ARMORED FILE/ PGP PUBLIC KEY BLOCK/;/^Comment: /d' \
 		> /etc/apt/trusted.gpg.d/$name.asc
 done
 rm /etc/apt/trusted.gpg.d/*.gpg
 rm /usr/share/keyrings/*.gpg
 {{ CMD }} --mode=root --variant=apt {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm -r /tmp/debian-chroot.tar
--- a/tests/aspcud-apt-solver
+++ b/tests/aspcud-apt-solver
@ -1,11 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -f /tmp/debian-chroot.tar" EXIT INT TERM
 {{ CMD }} --mode={{ MODE }} --variant=custom \
    --include $(cat pkglist.txt | tr '\n' ',') \
    --aptopt='APT::Solver "aspcud"' \
    {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort \
    | grep -v '^./etc/apt/apt.conf.d/99mmdebstrap$' \
    | diff -u tar1.txt -
--- a/tests/auto-mode-without-unshare-capabilities
+++ b/tests/auto-mode-without-unshare-capabilities
@ -1,12 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 adduser --gecos user --disabled-password user
 sysctl -w kernel.unprivileged_userns_clone=0
 runuser -u user -- {{ CMD }} --mode=auto --variant=apt {{ DIST }} /tmp/debian-chroot.tar.gz {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar.gz | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar.gz
--- a/tests/automatic-mirror-from-suite
+++ b/tests/automatic-mirror-from-suite
@ -1,14 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 cat << HOSTS >> /etc/hosts
 127.0.0.1 deb.debian.org
 127.0.0.1 security.debian.org
 HOSTS
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/debian-chroot.tar
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar
--- a/tests/check-against-debootstrap-dist
+++ b/tests/check-against-debootstrap-dist
@ -1,225 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 export SOURCE_DATE_EPOCH={{ SOURCE_DATE_EPOCH }}
 echo "SOURCE_DATE_EPOCH=$SOURCE_DATE_EPOCH"
 # we create the apt user ourselves or otherwise its uid/gid will differ
 # compared to the one chosen in debootstrap because of different installation
 # order in comparison to the systemd users
 # https://bugs.debian.org/969631
 # we cannot use useradd because passwd is not Essential:yes
 #
 # with cron 3.0pl1-142 and the introduction of cron-daemon-common, installation
 # order of cron and systemd started to differ between debootstrap and
 # mmdebstrap, resulting in different gid values
 {{ CMD }} --variant={{ VARIANT }} --mode={{ MODE }} \
 	--essential-hook='if [ {{ VARIANT }} = - ]; then echo _apt:*:100:65534::/nonexistent:/usr/sbin/nologin >> "$1"/etc/passwd; fi' \
 	--essential-hook='if [ {{ VARIANT }} = - ] && [ {{ DIST }} = unstable -o {{ DIST }} = testing ]; then printf "systemd-journal:x:101:\nsystemd-network:x:102:\nsystemd-resolve:x:103:\ncrontab:x:104:" >> "$1"/etc/group; fi' \
 	$(case {{ DIST }} in oldstable|stable) : ;; *) echo --hook-dir=./hooks/merged-usr ;; esac) \
 	{{ DIST }} /tmp/debian-{{ DIST }}-mm.tar {{ MIRROR }}
 mkdir /tmp/debian-{{ DIST }}-mm
 tar --xattrs --xattrs-include='*' -C /tmp/debian-{{ DIST }}-mm -xf /tmp/debian-{{ DIST }}-mm.tar
 rm /tmp/debian-{{ DIST }}-mm.tar
 mkdir /tmp/debian-{{ DIST }}-debootstrap
 tar --xattrs --xattrs-include='*' -C /tmp/debian-{{ DIST }}-debootstrap -xf "cache/debian-{{ DIST }}-{{ VARIANT }}.tar"
 # diff cannot compare device nodes, so we use tar to do that for us and then
 # delete the directory
 tar -C /tmp/debian-{{ DIST }}-debootstrap -cf dev1.tar ./dev
 tar -C /tmp/debian-{{ DIST }}-mm -cf dev2.tar ./dev
 ret=0
 cmp dev1.tar dev2.tar || ret=$?
 if [ "$ret" -ne 0 ]; then
 	if type diffoscope >/dev/null; then
 		diffoscope dev1.tar dev2.tar
 		exit 1
 	else
 		echo "no diffoscope installed" >&2
 	fi
 	if type base64 >/dev/null; then
 		base64 dev1.tar
 		base64 dev2.tar
 		exit 1
 	else
 		echo "no base64 installed" >&2
 	fi
 	if type xxd >/dev/null; then
 		xxd dev1.tar
 		xxd dev2.tar
 		exit 1
 	else
 		echo "no xxd installed" >&2
 	fi
 	exit 1
 fi
 rm dev1.tar dev2.tar
 rm -r /tmp/debian-{{ DIST }}-debootstrap/dev /tmp/debian-{{ DIST }}-mm/dev
 # remove downloaded deb packages
 rm /tmp/debian-{{ DIST }}-debootstrap/var/cache/apt/archives/*.deb
 # remove aux-cache
 rm /tmp/debian-{{ DIST }}-debootstrap/var/cache/ldconfig/aux-cache
 # remove logs
 rm /tmp/debian-{{ DIST }}-debootstrap/var/log/dpkg.log \
 	/tmp/debian-{{ DIST }}-debootstrap/var/log/bootstrap.log \
 	/tmp/debian-{{ DIST }}-debootstrap/var/log/alternatives.log
 # remove *-old files
 rm /tmp/debian-{{ DIST }}-debootstrap/var/cache/debconf/config.dat-old \
 	/tmp/debian-{{ DIST }}-mm/var/cache/debconf/config.dat-old
 rm /tmp/debian-{{ DIST }}-debootstrap/var/cache/debconf/templates.dat-old \
 	/tmp/debian-{{ DIST }}-mm/var/cache/debconf/templates.dat-old
 rm /tmp/debian-{{ DIST }}-debootstrap/var/lib/dpkg/status-old \
 	/tmp/debian-{{ DIST }}-mm/var/lib/dpkg/status-old
 # remove dpkg files
 rm /tmp/debian-{{ DIST }}-debootstrap/var/lib/dpkg/available
 rm /tmp/debian-{{ DIST }}-debootstrap/var/lib/dpkg/cmethopt
 # since we installed packages directly from the .deb files, Priorities differ
 # thus we first check for equality and then remove the files
 chroot /tmp/debian-{{ DIST }}-debootstrap dpkg --list > dpkg1
 chroot /tmp/debian-{{ DIST }}-mm dpkg --list > dpkg2
 diff -u dpkg1 dpkg2
 rm dpkg1 dpkg2
 grep -v '^Priority: ' /tmp/debian-{{ DIST }}-debootstrap/var/lib/dpkg/status > status1
 grep -v '^Priority: ' /tmp/debian-{{ DIST }}-mm/var/lib/dpkg/status > status2
 diff -u status1 status2
 rm status1 status2
 rm /tmp/debian-{{ DIST }}-debootstrap/var/lib/dpkg/status /tmp/debian-{{ DIST }}-mm/var/lib/dpkg/status
 # debootstrap exposes the hosts's kernel version
 if [ -e /tmp/debian-{{ DIST }}-debootstrap/etc/apt/apt.conf.d/01autoremove-kernels ]; then
 	rm /tmp/debian-{{ DIST }}-debootstrap/etc/apt/apt.conf.d/01autoremove-kernels
 fi
 if [ -e /tmp/debian-{{ DIST }}-mm/etc/apt/apt.conf.d/01autoremove-kernels ]; then
 	rm /tmp/debian-{{ DIST }}-mm/etc/apt/apt.conf.d/01autoremove-kernels
 fi
 # who creates /run/mount?
 if [ -e "/tmp/debian-{{ DIST }}-debootstrap/run/mount/utab" ]; then
 	rm "/tmp/debian-{{ DIST }}-debootstrap/run/mount/utab"
 fi
 if [ -e "/tmp/debian-{{ DIST }}-debootstrap/run/mount" ]; then
 	rmdir "/tmp/debian-{{ DIST }}-debootstrap/run/mount"
 fi
 # debootstrap doesn't clean apt
 rm /tmp/debian-{{ DIST }}-debootstrap/var/lib/apt/lists/127.0.0.1_debian_dists_{{ DIST }}_main_binary-{{ HOSTARCH }}_Packages \
 	/tmp/debian-{{ DIST }}-debootstrap/var/lib/apt/lists/127.0.0.1_debian_dists_{{ DIST }}_Release \
 	/tmp/debian-{{ DIST }}-debootstrap/var/lib/apt/lists/127.0.0.1_debian_dists_{{ DIST }}_Release.gpg
 if [ "{{ VARIANT }}" = "-" ]; then
 	rm /tmp/debian-{{ DIST }}-debootstrap/etc/machine-id
 	rm /tmp/debian-{{ DIST }}-mm/etc/machine-id
 	rm /tmp/debian-{{ DIST }}-debootstrap/var/lib/systemd/catalog/database
 	rm /tmp/debian-{{ DIST }}-mm/var/lib/systemd/catalog/database
 	cap=$(chroot /tmp/debian-{{ DIST }}-debootstrap /sbin/getcap /bin/ping)
 	expected="/bin/ping cap_net_raw=ep"
 	if [ "{{ DIST }}" = oldstable ]; then
 		expected="/bin/ping = cap_net_raw+ep"
 	fi
 	if [ "$cap" != "$expected" ]; then
 		echo "expected bin/ping to have capabilities $expected" >&2
 		echo "but debootstrap produced: $cap" >&2
 		exit 1
 	fi
 	cap=$(chroot /tmp/debian-{{ DIST }}-mm /sbin/getcap /bin/ping)
 	if [ "$cap" != "$expected" ]; then
 		echo "expected bin/ping to have capabilities $expected" >&2
 		echo "but mmdebstrap produced: $cap" >&2
 		exit 1
 	fi
 fi
 rm /tmp/debian-{{ DIST }}-mm/var/cache/apt/archives/lock
 rm /tmp/debian-{{ DIST }}-mm/var/lib/apt/extended_states
 rm /tmp/debian-{{ DIST }}-mm/var/lib/apt/lists/lock
 # the list of shells might be sorted wrongly
 # /var/lib/dpkg/triggers/File might be sorted wrongly
 for f in "/var/lib/dpkg/triggers/File" "/etc/shells"; do
 	f1="/tmp/debian-{{ DIST }}-debootstrap/$f"
 	f2="/tmp/debian-{{ DIST }}-mm/$f"
 	# both chroots must have the file
 	if [ ! -e "$f1" ] || [ ! -e "$f2" ]; then
 		continue
 	fi
 	# the file must be different
 	if cmp "$f1" "$f2"; then
 		continue
 	fi
 	# then sort both
 	sort -o "$f1" "$f1"
 	sort -o "$f2" "$f2"
 done
 # Because of unreproducible uids (#969631) we created the _apt user ourselves
 # and because passwd is not Essential:yes we didn't use useradd. But newer
 # versions of adduser and shadow will create a different /etc/shadow
 for f in shadow shadow-; do
 	if grep -q '^_apt:!:' /tmp/debian-{{ DIST }}-debootstrap/etc/$f; then
 		sed -i 's/^_apt:\*:\([^:]\+\):0:99999:7:::$/_apt:!:\1::::::/' /tmp/debian-{{ DIST }}-mm/etc/$f
 	fi
 done
 # same as above but for cron and systemd groups
 for f in gshadow gshadow-; do
 	for group in systemd-journal systemd-network systemd-resolve crontab; do
 		if grep -q '^'"$group"':!:' /tmp/debian-{{ DIST }}-debootstrap/etc/$f; then
 			sed -i 's/^'"$group"':x::/'"$group"':!::/' /tmp/debian-{{ DIST }}-mm/etc/$f
 		fi
 	done
 done
 # workaround for https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=917773
 if ! cmp /tmp/debian-{{ DIST }}-debootstrap/etc/shadow /tmp/debian-{{ DIST }}-mm/etc/shadow; then
 	echo patching /etc/shadow on {{ DIST }} {{ VARIANT }} >&2
 	awk -v FS=: -v OFS=: -v SDE={{ SOURCE_DATE_EPOCH }} '{ print $1,$2,int(SDE/60/60/24),$4,$5,$6,$7,$8,$9 }' < /tmp/debian-{{ DIST }}-mm/etc/shadow > /tmp/debian-{{ DIST }}-mm/etc/shadow.bak
 	cat /tmp/debian-{{ DIST }}-mm/etc/shadow.bak > /tmp/debian-{{ DIST }}-mm/etc/shadow
 	rm /tmp/debian-{{ DIST }}-mm/etc/shadow.bak
 else
 	echo no difference for /etc/shadow on {{ DIST }} {{ VARIANT }} >&2
 fi
 if ! cmp /tmp/debian-{{ DIST }}-debootstrap/etc/shadow- /tmp/debian-{{ DIST }}-mm/etc/shadow-; then
 	echo patching /etc/shadow- on {{ DIST }} {{ VARIANT }} >&2
 	awk -v FS=: -v OFS=: -v SDE={{ SOURCE_DATE_EPOCH }} '{ print $1,$2,int(SDE/60/60/24),$4,$5,$6,$7,$8,$9 }' < /tmp/debian-{{ DIST }}-mm/etc/shadow- > /tmp/debian-{{ DIST }}-mm/etc/shadow-.bak
 	cat /tmp/debian-{{ DIST }}-mm/etc/shadow-.bak > /tmp/debian-{{ DIST }}-mm/etc/shadow-
 	rm /tmp/debian-{{ DIST }}-mm/etc/shadow-.bak
 else
 	echo no difference for /etc/shadow- on {{ DIST }} {{ VARIANT }} >&2
 fi
 # Because of unreproducible uids (#969631) we created the _apt user ourselves
 # and because passwd is not Essential:yes we didn't use useradd. But passwd
 # since 1:4.11.1+dfsg1-1 will create empty mail files, so we create it too.
 # https://bugs.debian.org/1004710
 if [ {{ VARIANT }} = - ]; then
 	if [ -e /tmp/debian-{{ DIST }}-debootstrap/var/mail/_apt ]; then
 		touch /tmp/debian-{{ DIST }}-mm/var/mail/_apt
 		chmod 660 /tmp/debian-{{ DIST }}-mm/var/mail/_apt
 		chown 100:8 /tmp/debian-{{ DIST }}-mm/var/mail/_apt
 	fi
 fi
 # check if the file content differs
 diff --unified --no-dereference --recursive /tmp/debian-{{ DIST }}-debootstrap /tmp/debian-{{ DIST }}-mm >&2
 # check permissions, ownership, symlink targets, modification times using tar
 # directory mtimes will differ, thus we equalize them first
 find /tmp/debian-{{ DIST }}-debootstrap /tmp/debian-{{ DIST }}-mm -type d -print0 | xargs -0 touch --date="@{{ SOURCE_DATE_EPOCH }}"
 # debootstrap never ran apt -- fixing permissions
 for d in ./var/lib/apt/lists/partial ./var/cache/apt/archives/partial; do
 	chroot /tmp/debian-{{ DIST }}-debootstrap chmod 0700 $d
 	chroot /tmp/debian-{{ DIST }}-debootstrap chown _apt:root $d
 done
 tar -C /tmp/debian-{{ DIST }}-debootstrap --numeric-owner --sort=name --clamp-mtime --mtime=$(date --utc --date=@{{ SOURCE_DATE_EPOCH }} --iso-8601=seconds) -cf /tmp/root1.tar .
 tar -C /tmp/debian-{{ DIST }}-mm --numeric-owner --sort=name --clamp-mtime --mtime=$(date --utc --date=@{{ SOURCE_DATE_EPOCH }} --iso-8601=seconds) -cf /tmp/root2.tar .
 tar --full-time --verbose -tf /tmp/root1.tar > /tmp/root1.tar.list
 tar --full-time --verbose -tf /tmp/root2.tar > /tmp/root2.tar.list
 diff -u /tmp/root1.tar.list /tmp/root2.tar.list
 rm /tmp/root1.tar /tmp/root2.tar /tmp/root1.tar.list /tmp/root2.tar.list
 # check if file properties (permissions, ownership, symlink names, modification time) differ
 #
 # we cannot use this (yet) because it cannot cope with paths that have [ or @ in them
 #fmtree -c -p /tmp/debian-{{ DIST }}-debootstrap -k flags,gid,link,mode,size,time,uid | sudo fmtree -p /tmp/debian-{{ DIST }}-mm
 rm -r /tmp/debian-{{ DIST }}-debootstrap /tmp/debian-{{ DIST }}-mm
--- a/tests/check-for-bit-by-bit-identical-format-output
+++ b/tests/check-for-bit-by-bit-identical-format-output
@ -1,35 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 adduser --gecos user --disabled-password user
 sysctl -w kernel.unprivileged_userns_clone=1
 export SOURCE_DATE_EPOCH={{ SOURCE_DATE_EPOCH }}
 mount -o size=4G -t tmpfs tmpfs /tmp # workaround for #1010957
 {{ CMD }} --mode=root --variant={{ VARIANT }} {{ DIST }} /tmp/debian-chroot-root.{{ FORMAT }} {{ MIRROR }}
 if [ "{{ FORMAT }}" = tar ]; then
 	printf 'ustar ' | cmp --bytes=6 --ignore-initial=257:0 /tmp/debian-chroot-root.tar -
 elif [ "{{ FORMAT }}" = squashfs ]; then
 	printf 'hsqs' | cmp --bytes=4 /tmp/debian-chroot-root.squashfs -
 elif [ "{{ FORMAT }}" = ext2 ]; then
 	printf '\123\357' | cmp --bytes=2 --ignore-initial=1080:0 /tmp/debian-chroot-root.ext2 -
 else
 	echo "unknown format: {{ FORMAT }}" >&2
 	exit 1
 fi
 runuser -u user -- {{ CMD }} --mode=unshare --variant={{ VARIANT }} {{ DIST }} /tmp/debian-chroot-unshare.{{ FORMAT }} {{ MIRROR }}
 cmp /tmp/debian-chroot-root.{{ FORMAT }} /tmp/debian-chroot-unshare.{{ FORMAT }}
 rm /tmp/debian-chroot-unshare.{{ FORMAT }}
 case {{ VARIANT }} in essential|apt|minbase|buildd)
 	# variants important and standard differ because permissions drwxr-sr-x
 	# and extended attributes of ./var/log/journal/ cannot be preserved
 	# in fakechroot mode
 	runuser -u user -- {{ CMD }} --mode=fakechroot --variant={{ VARIANT }} {{ DIST }} /tmp/debian-chroot-fakechroot.{{ FORMAT }} {{ MIRROR }}
 	cmp /tmp/debian-chroot-root.{{ FORMAT }} /tmp/debian-chroot-fakechroot.{{ FORMAT }}
 	rm /tmp/debian-chroot-fakechroot.{{ FORMAT }}
 	;;
 esac
 rm /tmp/debian-chroot-root.{{ FORMAT }}
--- a/tests/chroot-directory-not-accessible-by-apt-user
+++ b/tests/chroot-directory-not-accessible-by-apt-user
@ -1,8 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot" EXIT INT TERM
 mkdir /tmp/debian-chroot
 chmod 700 /tmp/debian-chroot
 {{ CMD }} --mode=root --variant=apt {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
--- a/tests/compare-output-with-pre-seeded-var-cache-apt-archives
+++ b/tests/compare-output-with-pre-seeded-var-cache-apt-archives
@ -1,45 +0,0 @@
 #!/bin/sh
 #
 # test that the user can drop archives into /var/cache/apt/archives as well as
 # into /var/cache/apt/archives/partial
 set -eu
 export LC_ALL=C.UTF-8
 export SOURCE_DATE_EPOCH={{ SOURCE_DATE_EPOCH }}
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test requires the cache directory to be mounted on /mnt and should only be run inside a container" >&2
 	exit 1
 fi
 include="--include=doc-debian"
 if [ "{{ VARIANT }}" = "custom" ]; then
 	include="$include,base-files,base-passwd,coreutils,dash,diffutils,dpkg,libc-bin,sed"
 fi
 mount -o size=4G -t tmpfs tmpfs /tmp # workaround for #1010957
 {{ CMD }} $include --mode={{ MODE }} --variant={{ VARIANT }} \
 	--setup-hook='mkdir -p "$1"/var/cache/apt/archives/partial' \
 	--setup-hook='touch "$1"/var/cache/apt/archives/lock' \
 	--setup-hook='chmod 0640 "$1"/var/cache/apt/archives/lock' \
 	{{ DIST }} - {{ MIRROR }} > orig.tar
 # somehow, when trying to create a tarball from the 9p mount, tar throws the
 # following error: tar: ./doc-debian_6.4_all.deb: File shrank by 132942 bytes; padding with zeros
 # to reproduce, try: tar --directory /mnt/cache/debian/pool/main/d/doc-debian/ --create --file - . | tar --directory /tmp/ --extract --file -
 # this will be different:
 # md5sum /mnt/cache/debian/pool/main/d/doc-debian/*.deb /tmp/*.deb
 # another reason to copy the files into a new directory is, that we can use shell globs
 tmpdir=$(mktemp -d)
 cp /mnt/cache/debian/pool/main/b/busybox/busybox_*"_{{ HOSTARCH }}.deb" /mnt/cache/debian/pool/main/a/apt/apt_*"_{{ HOSTARCH }}.deb" "$tmpdir"
 {{ CMD }} $include --mode={{ MODE }} --variant={{ VARIANT }} \
 	--setup-hook='mkdir -p "$1"/var/cache/apt/archives/partial' \
 	--setup-hook='sync-in "'"$tmpdir"'" /var/cache/apt/archives/partial' \
 	{{ DIST }} - {{ MIRROR }} > test1.tar
 cmp orig.tar test1.tar
 {{ CMD }} $include --mode={{ MODE }} --variant={{ VARIANT }} \
 	--customize-hook='touch "$1"/var/cache/apt/archives/partial' \
 	--setup-hook='mkdir -p "$1"/var/cache/apt/archives/' \
 	--setup-hook='sync-in "'"$tmpdir"'" /var/cache/apt/archives/' \
 	--setup-hook='chmod 0755 "$1"/var/cache/apt/archives/' \
 	--customize-hook='find "'"$tmpdir"'" -type f -exec md5sum "{}" \; | sed "s|"'"$tmpdir"'"|$1/var/cache/apt/archives|" | md5sum --check' \
 	{{ DIST }} - {{ MIRROR }} > test2.tar
 cmp orig.tar test2.tar
 rm "$tmpdir"/*.deb orig.tar test1.tar test2.tar
 rmdir "$tmpdir"
--- a/tests/copy-mirror
+++ b/tests/copy-mirror
@ -1,10 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test requires the cache directory to be mounted on /mnt and should only be run inside a container" >&2
 	exit 1
 fi
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/debian-chroot.tar "deb copy:///mnt/cache/debian {{ DIST }} main"
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar
--- a/tests/create-arm64-tarball
+++ b/tests/create-arm64-tarball
@ -1,45 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ "$(id -u)" -eq 0 ] && ! id -u user > /dev/null 2>&1; then
 	if [ ! -e /mmdebstrap-testenv ]; then
 		echo "this test modifies the system and should only be run inside a container" >&2
 		exit 1
 	fi
 	adduser --gecos user --disabled-password user
 fi
 if [ "{{ MODE }}" = unshare ]; then
 	if [ ! -e /mmdebstrap-testenv ]; then
 		echo "this test modifies the system and should only be run inside a container" >&2
 		exit 1
 	fi
 	sysctl -w kernel.unprivileged_userns_clone=1
 fi
 prefix=
 [ "$(id -u)" -eq 0 ] && [ "{{ MODE }}" != "root" ] && prefix="runuser -u user --"
 [ "{{ MODE }}" = "fakechroot" ] && prefix="$prefix fakechroot fakeroot"
 $prefix {{ CMD }} --mode={{ MODE }} --variant=apt --architectures=arm64 {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 # we ignore differences between architectures by ignoring some files
 # and renaming others
 # in proot mode, some extra files are put there by proot
 { tar -tf /tmp/debian-chroot.tar \
 	| grep -v '^\./lib/ld-linux-aarch64\.so\.1$' \
 	| grep -v '^\./lib/aarch64-linux-gnu/ld-linux-aarch64\.so\.1$' \
 	| grep -v '^\./usr/share/doc/[^/]\+/changelog\(\.Debian\)\?\.arm64\.gz$' \
 	| sed 's/aarch64-linux-gnu/x86_64-linux-gnu/' \
 	| sed 's/arm64/amd64/';
 } | sort > tar2.txt
 { cat tar1.txt \
 	| grep -v '^\./usr/bin/i386$' \
 	| grep -v '^\./usr/bin/x86_64$' \
 	| grep -v '^\./lib64/$' \
 	| grep -v '^\./lib64/ld-linux-x86-64\.so\.2$' \
 	| grep -v '^\./lib/x86_64-linux-gnu/ld-linux-x86-64\.so\.2$' \
 	| grep -v '^\./lib/x86_64-linux-gnu/libmvec-2\.[0-9]\+\.so$' \
 	| grep -v '^\./lib/x86_64-linux-gnu/libmvec\.so\.1$' \
 	| grep -v '^\./usr/share/doc/[^/]\+/changelog\(\.Debian\)\?\.amd64\.gz$' \
 	| grep -v '^\./usr/share/man/man8/i386\.8\.gz$' \
 	| grep -v '^\./usr/share/man/man8/x86_64\.8\.gz$';
 	[ "{{ MODE }}" = "proot" ] && printf "./etc/ld.so.preload\n";
 } | sort | diff -u - tar2.txt
 rm /tmp/debian-chroot.tar
--- a/tests/create-directory
+++ b/tests/create-directory
@ -1,7 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 {{ CMD }} --mode=root --variant=apt {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 chroot /tmp/debian-chroot dpkg-query --showformat '${binary:Package}\n' --show > pkglist.txt
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort > tar1.txt
 rm -r /tmp/debian-chroot
--- a/tests/create-directory-dry-run
+++ b/tests/create-directory-dry-run
@ -1,28 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 {{ CMD }} --mode={{ MODE }} --dry-run --variant=apt \
 	--setup-hook="exit 1" \
 	--essential-hook="exit 1" \
 	--customize-hook="exit 1" \
 	{{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 rm /tmp/debian-chroot/dev/console
 rm /tmp/debian-chroot/dev/fd
 rm /tmp/debian-chroot/dev/full
 rm /tmp/debian-chroot/dev/null
 rm /tmp/debian-chroot/dev/ptmx
 rm /tmp/debian-chroot/dev/random
 rm /tmp/debian-chroot/dev/stderr
 rm /tmp/debian-chroot/dev/stdin
 rm /tmp/debian-chroot/dev/stdout
 rm /tmp/debian-chroot/dev/tty
 rm /tmp/debian-chroot/dev/urandom
 rm /tmp/debian-chroot/dev/zero
 rm /tmp/debian-chroot/etc/apt/sources.list
 rm /tmp/debian-chroot/etc/fstab
 rm /tmp/debian-chroot/etc/hostname
 rm /tmp/debian-chroot/etc/resolv.conf
 rm /tmp/debian-chroot/var/lib/apt/lists/lock
 rm /tmp/debian-chroot/var/lib/dpkg/status
 # the rest should be empty directories that we can rmdir recursively
 find /tmp/debian-chroot -depth -print0 | xargs -0 rmdir
--- a/tests/create-gzip-compressed-tarball
+++ b/tests/create-gzip-compressed-tarball
@ -1,13 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 adduser --gecos user --disabled-password user
 sysctl -w kernel.unprivileged_userns_clone=1
 runuser -u user -- {{ CMD }} --mode=unshare --variant=apt {{ DIST }} /tmp/debian-chroot.tar.gz {{ MIRROR }}
 printf '\037\213\010' | cmp --bytes=3 /tmp/debian-chroot.tar.gz -
 tar -tf /tmp/debian-chroot.tar.gz | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar.gz
--- a/tests/create-tarball-dry-run
+++ b/tests/create-tarball-dry-run
@ -1,35 +0,0 @@
 #!/bin/sh
 #
 # we are testing all variants here because with 0.7.5 we had a bug:
 # mmdebstrap sid /dev/null --simulate ==> E: cannot read /var/cache/apt/archives/
 set -eu
 export LC_ALL=C.UTF-8
 prefix=
 include=
 if [ "$(id -u)" -eq 0 ] && [ "{{ MODE }}" != root ] && [ "{{ MODE }}" != auto ]; then
 	# this must be qemu
 	if ! id -u user >/dev/null 2>&1; then
 		if [ ! -e /mmdebstrap-testenv ]; then
 			echo "this test modifies the system and should only be run inside a container" >&2
 			exit 1
 		fi
 		adduser --gecos user --disabled-password user
 	fi
 	if [ "{{ MODE }}" = unshare ]; then
 		if [ ! -e /mmdebstrap-testenv ]; then
 			echo "this test modifies the system and should only be run inside a container" >&2
 			exit 1
 		fi
 		sysctl -w kernel.unprivileged_userns_clone=1
 	fi
 	prefix="runuser -u user --"
 	if [ "{{ MODE }}" = extract ] || [ "{{ MODE }}" = custom ]; then
 		include="--include=$(cat pkglist.txt | tr '\n' ',')"
 	fi
 fi
 $prefix {{ CMD }} --mode={{ MODE }} $include --dry-run --variant={{ VARIANT }} {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 if [ -e /tmp/debian-chroot.tar ]; then
 	echo "/tmp/debian-chroot.tar must not be created with --dry-run" >&2
 	exit 1
 fi
--- a/tests/create-tarball-with-tmp-mounted-nodev
+++ b/tests/create-tarball-with-tmp-mounted-nodev
@ -1,12 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 mount -t tmpfs -o nodev,nosuid,size=300M tmpfs /tmp
 # use --customize-hook to exercise the mounting/unmounting code of block devices in root mode
 {{ CMD }} --mode=root --variant=apt --customize-hook='mount | grep /dev/full' --customize-hook='test "$(echo foo | tee /dev/full 2>&1 1>/dev/null)" = "tee: /dev/full: No space left on device"' {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar
--- a/tests/custom-tmpdir
+++ b/tests/custom-tmpdir
@ -1,22 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 # https://www.etalabs.net/sh_tricks.html
 quote () { printf %s\\n "$1" | sed "s/'/'\\\\''/g;1s/^/'/;\$s/\$/'/" ; }
 adduser --gecos user --disabled-password user
 sysctl -w kernel.unprivileged_userns_clone=1
 homedir=$(runuser -u user -- sh -c 'cd && pwd')
 # apt:test/integration/test-apt-key
 TMPDIR_ADD="This is fü\$\$ing cràzy, \$(apt -v)\$!"
 runuser -u user -- mkdir "$homedir/$TMPDIR_ADD"
 runuser -u user -- env TMPDIR="$homedir/$TMPDIR_ADD" {{ CMD }} --mode=unshare --variant=apt \
 	--setup-hook='case "$1" in '"$(quote "$homedir/$TMPDIR_ADD/mmdebstrap.")"'??????????) exit 0;; *) echo "$1"; exit 1;; esac' \
 	 {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 # use rmdir as a quick check that nothing is remaining in TMPDIR
 runuser -u user -- rmdir "$homedir/$TMPDIR_ADD"
 rm /tmp/debian-chroot.tar
--- a/tests/customize-hook
+++ b/tests/customize-hook
@ -1,16 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot; rm -f /tmp/customize.sh" EXIT INT TERM
 cat << 'SCRIPT' > /tmp/customize.sh
 #!/bin/sh
 chroot "$1" whoami > "$1/output2"
 chroot "$1" pwd >> "$1/output2"
 SCRIPT
 chmod +x /tmp/customize.sh
 {{ CMD }} --mode=root --variant=apt --customize-hook='chroot "$1" sh -c "whoami; pwd" > "$1/output1"' --customize-hook=/tmp/customize.sh {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 printf "root\n/\n" | cmp /tmp/debian-chroot/output1
 printf "root\n/\n" | cmp /tmp/debian-chroot/output2
 rm /tmp/debian-chroot/output1
 rm /tmp/debian-chroot/output2
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
--- a/tests/cwd-directory-not-accessible-by-unshared-user
+++ b/tests/cwd-directory-not-accessible-by-unshared-user
@ -1,22 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 adduser --gecos user --disabled-password user
 sysctl -w kernel.unprivileged_userns_clone=1
 mkdir /tmp/debian-chroot
 chmod 700 /tmp/debian-chroot
 chown user:user /tmp/debian-chroot
 if [ "{{ CMD }}" = "./mmdebstrap" ]; then
 	CMD=$(realpath --canonicalize-existing ./mmdebstrap)
 elif [ "{{ CMD }}" = "perl -MDevel::Cover=-silent,-nogcov ./mmdebstrap" ]; then
 	CMD="perl -MDevel::Cover=-silent,-nogcov $(realpath --canonicalize-existing ./mmdebstrap)"
 else
 	CMD="{{ CMD }}"
 fi
 env --chdir=/tmp/debian-chroot runuser -u user -- $CMD --mode=unshare --variant=apt {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar
--- a/tests/deb822-1-2
+++ b/tests/deb822-1-2
@ -1,45 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot; rm -f /tmp/sources.list /tmp/deb822.sources" EXIT INT TERM
 cat << SOURCES > /tmp/deb822.sources
 Types: deb
 URIs: {{ MIRROR }}1
 Suites: {{ DIST }}
 Components: main
 SOURCES
 echo "deb {{ MIRROR }}2 {{ DIST }} main" > /tmp/sources.list
 echo "deb {{ MIRROR }}3 {{ DIST }} main" \
 	| {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} \
 		/tmp/debian-chroot \
 		/tmp/deb822.sources \
 		{{ MIRROR }}4 \
 		- \
 		"deb {{ MIRROR }}5 {{ DIST }} main" \
 		{{ MIRROR }}6 \
 		/tmp/sources.list
 test ! -e /tmp/debian-chroot/etc/apt/sources.list
 cat << SOURCES | cmp /tmp/debian-chroot/etc/apt/sources.list.d/0000deb822.sources -
 Types: deb
 URIs: {{ MIRROR }}1
 Suites: {{ DIST }}
 Components: main
 SOURCES
 cat << SOURCES | cmp /tmp/debian-chroot/etc/apt/sources.list.d/0001main.list -
 deb {{ MIRROR }}4 {{ DIST }} main
 deb {{ MIRROR }}3 {{ DIST }} main
 deb {{ MIRROR }}5 {{ DIST }} main
 deb {{ MIRROR }}6 {{ DIST }} main
 SOURCES
 echo "deb {{ MIRROR }}2 {{ DIST }} main" | cmp /tmp/debian-chroot/etc/apt/sources.list.d/0002sources.list -
 tar -C /tmp/debian-chroot --one-file-system -c . \
 	| {
 		tar -t \
 			| grep -v "^./etc/apt/sources.list.d/0000deb822.sources$" \
 			| grep -v "^./etc/apt/sources.list.d/0001main.list$" \
 			| grep -v "^./etc/apt/sources.list.d/0002sources.list";
 		printf "./etc/apt/sources.list\n";
 	} | sort | diff -u tar1.txt -
--- a/tests/deb822-2-2
+++ b/tests/deb822-2-2
@ -1,44 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot; rm -f /tmp/sources /tmp/deb822" EXIT INT TERM
 cat << SOURCES > /tmp/deb822
 Types: deb
 URIs: {{ MIRROR }}1
 Suites: {{ DIST }}
 Components: main
 SOURCES
 echo "deb {{ MIRROR }}2 {{ DIST }} main" > /tmp/sources
 cat << SOURCES | {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} \
 		/tmp/debian-chroot \
 		/tmp/deb822 \
 		- \
 		/tmp/sources
 Types: deb
 URIs: {{ MIRROR }}3
 Suites: {{ DIST }}
 Components: main
 SOURCES
 test ! -e /tmp/debian-chroot/etc/apt/sources.list
 ls -lha /tmp/debian-chroot/etc/apt/sources.list.d/
 cat << SOURCES | cmp /tmp/debian-chroot/etc/apt/sources.list.d/0000deb822.sources -
 Types: deb
 URIs: {{ MIRROR }}1
 Suites: {{ DIST }}
 Components: main
 SOURCES
 cat << SOURCES | cmp /tmp/debian-chroot/etc/apt/sources.list.d/0001main.sources -
 Types: deb
 URIs: {{ MIRROR }}3
 Suites: {{ DIST }}
 Components: main
 SOURCES
 echo "deb {{ MIRROR }}2 {{ DIST }} main" | cmp /tmp/debian-chroot/etc/apt/sources.list.d/0002sources.list -
 tar -C /tmp/debian-chroot --one-file-system -c . \
 	| {
 		tar -t \
 			| grep -v "^./etc/apt/sources.list.d/0000deb822.sources$" \
 			| grep -v "^./etc/apt/sources.list.d/0001main.sources$" \
 			| grep -v "^./etc/apt/sources.list.d/0002sources.list$";
 		printf "./etc/apt/sources.list\n";
 	} | sort | diff -u tar1.txt -
--- a/tests/debootstrap-no-op-options
+++ b/tests/debootstrap-no-op-options
@ -1,6 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 {{ CMD }} --mode=root --variant=apt --resolve-deps --merged-usr --no-merged-usr --force-check-gpg {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
 rm -r /tmp/debian-chroot
--- a/tests/debug
+++ b/tests/debug
@ -1,6 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 {{ CMD }} --mode=root --variant=apt --debug {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
 rm -r /tmp/debian-chroot
--- a/tests/debug-output-on-fake-tty
+++ b/tests/debug-output-on-fake-tty
@ -1,6 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -f /tmp/debian-chroot.tar" EXIT INT TERM
 script -qfc "{{ CMD }} --mode={{ MODE }} --debug --variant=apt {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}" /dev/null
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
--- a/tests/dev-ptmx
+++ b/tests/dev-ptmx
@ -1,145 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ {{ MODE }} != unshare ] && [ {{ MODE }} != root ]; then
 	echo "test requires root or unshare mode" >&2
 	exit 1
 fi
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 if [ "$(id -u)" -eq 0 ] && ! id -u user > /dev/null 2>&1; then
 	adduser --gecos user --disabled-password user
 fi
 prefix=
 [ "$(id -u)" -eq 0 ] && [ "{{ MODE }}" != "root" ] && prefix="runuser -u user --"
 # this mimics what apt does in apt-pkg/deb/dpkgpm.cc/pkgDPkgPM::StartPtyMagic()
 cat > /tmp/test.c << 'END'
 #define _GNU_SOURCE
 #include <stdlib.h>
 #include <fcntl.h>
 #include <termios.h>
 #include <unistd.h>
 #include <stdio.h>
 #include <sys/ioctl.h>
 #include <signal.h>
 int main() {
 	int ret;
 	int fd = posix_openpt(O_RDWR | O_NOCTTY);
 	if (fd < 0) {
 		perror("posix_openpt");
 		return 1;
 	}
 	char buf[64]; // 64 is used by apt
 	ret = ptsname_r(fd, buf, sizeof(buf));
 	if (ret != 0) {
 		perror("ptsname_r");
 		return 1;
 	}
 	ret = grantpt(fd);
 	if (ret == -1) {
 		perror("grantpt");
 		return 1;
 	}
 	struct termios origtt;
 	ret = tcgetattr(STDIN_FILENO, &origtt);
 	if (ret != 0) {
 		perror("tcgetattr1");
 		return 1;
 	}
 	struct termios tt;
 	ret = tcgetattr(STDOUT_FILENO, &tt);
 	if (ret != 0) {
 		perror("tcgetattr2");
 		return 1;
 	}
 	struct winsize win;
 	ret = ioctl(STDOUT_FILENO, TIOCGWINSZ, &win);
 	if (ret < 0) {
 		perror("ioctl stdout TIOCGWINSZ");
 		return 1;
 	}
 	ret = ioctl(fd, TIOCSWINSZ, &win);
 	if (ret < 0) {
 		perror("ioctl fd TIOCGWINSZ");
 		return 1;
 	}
 	ret = tcsetattr(fd, TCSANOW, &tt);
 	if (ret != 0) {
 		perror("tcsetattr1");
 		return 1;
 	}
 	cfmakeraw(&tt);
 	tt.c_lflag &= ~ECHO;
 	tt.c_lflag |= ISIG;
 	sigset_t sigmask;
 	sigset_t sigmask_old;
 	ret = sigemptyset(&sigmask);
 	if (ret != 0) {
 		perror("sigemptyset");
 		return 1;
 	}
 	ret = sigaddset(&sigmask, SIGTTOU);
 	if (ret != 0) {
 		perror("sigaddset");
 		return 1;
 	}
 	ret = sigprocmask(SIG_BLOCK,&sigmask, &sigmask_old);
 	if (ret != 0) {
 		perror("sigprocmask1");
 		return 1;
 	}
 	ret = tcsetattr(STDIN_FILENO, TCSAFLUSH, &tt);
 	if (ret != 0) {
 		perror("tcsetattr2");
 		return 1;
 	}
 	ret = sigprocmask(SIG_BLOCK,&sigmask_old, NULL);
 	if (ret != 0) {
 		perror("sigprocmask2");
 		return 1;
 	}
 	ret = tcsetattr(STDIN_FILENO, TCSAFLUSH, &origtt);
 	if (ret != 0) {
 		perror("tcsetattr3");
 		return 1;
 	}
 	return 0;
 }
 END
 # use script to create a fake tty
 # run all tests as root and as a normal user (the latter requires ptmxmode=666)
 script -qfc "$prefix {{ CMD }} --mode={{ MODE }} --variant=apt \
 	--include=gcc,libc6-dev,python3 \
 	--customize-hook='chroot \"\$1\" adduser --gecos user --disabled-password user' \
 	--customize-hook='chroot \"\$1\" python3 -c \"import pty; print(pty.openpty())\"' \
 	--customize-hook='chroot \"\$1\" runuser -u user -- python3 -c \"import pty; print(pty.openpty())\"' \
 	--customize-hook='chroot \"\$1\" script -c \"echo foobar\"' \
 	--customize-hook='chroot \"\$1\" runuser -u user -- env --chdir=/home/user script -c \"echo foobar\"' \
 	--customize-hook='chroot \"\$1\" apt-get install --yes doc-debian 2>&1 | tee /tmp/log' \
 	--customize-hook=\"copy-in /tmp/test.c /tmp\" \
 	--customize-hook='chroot \"\$1\" gcc /tmp/test.c -o /tmp/test' \
 	--customize-hook='chroot \"\$1\" /tmp/test' \
 	--customize-hook='chroot \"\$1\" runuser -u user -- /tmp/test' \
 	--customize-hook='rm \"\$1\"/tmp/test \"\$1\"/tmp/test.c' \
 	{{ DIST }} /dev/null {{ MIRROR }}" /dev/null
 fail=0
 grep '^E:' /tmp/log && fail=1
 grep 'Can not write log' /tmp/log && fail=1
 grep 'posix_openpt' /tmp/log && fail=1
 grep 'No such file or directory' /tmp/log && fail=1
 if [ $fail -eq 1 ]; then
 	echo "apt failed to write log:" >&2
 	cat /tmp/log >&2
 	exit 1
 fi
 rm /tmp/test.c /tmp/log
--- a/tests/directory-ending-in-tar
+++ b/tests/directory-ending-in-tar
@ -1,12 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 [ "$(whoami)" = "root" ]
 trap "rm -rf /tmp/debian-chroot.tar" EXIT INT TERM
 {{ CMD }} --mode={{ MODE }} --variant=apt --format=directory {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 ftype=$(stat -c %F /tmp/debian-chroot.tar)
 if [ "$ftype" != directory ]; then
 	echo "expected directory but got: $ftype" >&2
 	exit 1
 fi
 tar -C /tmp/debian-chroot.tar --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
--- a/tests/dist-using-codename
+++ b/tests/dist-using-codename
@ -1,11 +0,0 @@
 #!/bin/sh
 #
 # make sure that using codenames works https://bugs.debian.org/1003191
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -f Release; rm -rf /tmp/debian-chroot" EXIT INT TERM
 /usr/lib/apt/apt-helper download-file "{{ MIRROR }}/dists/{{ DIST }}/Release" Release
 codename=$(awk '/^Codename: / { print $2; }' Release)
 {{ CMD }} --mode={{ MODE }} --variant=apt $codename /tmp/debian-chroot {{ MIRROR }}
 echo "deb {{ MIRROR }} $codename main" | diff -u - /tmp/debian-chroot/etc/apt/sources.list
--- a/tests/dpkgopt
+++ b/tests/dpkgopt
@ -1,10 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot; rm -f /tmp/config" EXIT INT TERM
 echo no-pager > /tmp/config
 {{ CMD }} --mode=root --variant=apt --dpkgopt="path-exclude=/usr/share/doc/*" --dpkgopt=/tmp/config --dpkgopt="path-include=/usr/share/doc/dpkg/copyright" {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 printf 'path-exclude=/usr/share/doc/*\nno-pager\npath-include=/usr/share/doc/dpkg/copyright\n' | cmp /tmp/debian-chroot/etc/dpkg/dpkg.cfg.d/99mmdebstrap -
 rm /tmp/debian-chroot/etc/dpkg/dpkg.cfg.d/99mmdebstrap
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort > tar2.txt
 { grep -v '^./usr/share/doc/.' tar1.txt; echo ./usr/share/doc/dpkg/; echo ./usr/share/doc/dpkg/copyright; } | sort | diff -u - tar2.txt
--- a/tests/eatmydata-via-hook-dir
+++ b/tests/eatmydata-via-hook-dir
@ -1,39 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 cat << SCRIPT > /tmp/checkeatmydata.sh
 #!/bin/sh
 set -exu
 cat << EOF | diff - "\$1"/usr/bin/dpkg
 #!/bin/sh
 exec /usr/bin/eatmydata /usr/bin/dpkg.distrib "\\\$@"
 EOF
 [ -e "\$1"/usr/bin/eatmydata ]
 SCRIPT
 chmod +x /tmp/checkeatmydata.sh
 # first four bytes: magic
 elfheader="\\177ELF"
 # fifth byte: bits
 case "$(dpkg-architecture -qDEB_HOST_ARCH_BITS)" in
 	32) elfheader="$elfheader\\001";;
 	64) elfheader="$elfheader\\002";;
 	*) echo "bits not supported"; exit 1;;
 esac
 # sixth byte: endian
 case "$(dpkg-architecture -qDEB_HOST_ARCH_ENDIAN)" in
 	little) elfheader="$elfheader\\001";;
 	big) elfheader="$elfheader\\002";;
 	*) echo "endian not supported"; exit 1;;
 esac
 # seventh and eigth byte: elf version (1) and abi (unset)
 elfheader="$elfheader\\001\\000"
 {{ CMD }} --mode=root --variant=apt \
 	--customize-hook=/tmp/checkeatmydata.sh \
 	--essential-hook=/tmp/checkeatmydata.sh \
 	--extract-hook='printf "'"$elfheader"'" | cmp --bytes=8 - "$1"/usr/bin/dpkg' \
 	--hook-dir=./hooks/eatmydata \
 	--customize-hook='printf "'"$elfheader"'" | cmp --bytes=8 - "$1"/usr/bin/dpkg' \
 	 {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
 rm /tmp/checkeatmydata.sh
 rm -r /tmp/debian-chroot
--- a/tests/essential-hook
+++ b/tests/essential-hook
@ -1,20 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot; rm -f /tmp/essential.sh" EXIT INT TERM
 cat << 'SCRIPT' > /tmp/essential.sh
 #!/bin/sh
 echo tzdata tzdata/Zones/Europe select Berlin | chroot "$1" debconf-set-selections
 SCRIPT
 chmod +x /tmp/essential.sh
 {{ CMD }} --mode=root --variant=apt --include=tzdata --essential-hook='echo tzdata tzdata/Areas select Europe | chroot "$1" debconf-set-selections' --essential-hook=/tmp/essential.sh {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 echo Europe/Berlin | cmp /tmp/debian-chroot/etc/timezone
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort \
 	| grep -v '^./etc/localtime' \
 	| grep -v '^./etc/timezone' \
 	| grep -v '^./usr/sbin/tzconfig' \
 	| grep -v '^./usr/share/doc/tzdata' \
 	| grep -v '^./usr/share/zoneinfo' \
 	| grep -v '^./var/lib/dpkg/info/tzdata.' \
 	| grep -v '^./var/lib/apt/extended_states$' \
 	| diff -u tar1.txt -
--- a/tests/existing-directory-with-lost-found
+++ b/tests/existing-directory-with-lost-found
@ -1,9 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot" EXIT INT TERM
 mkdir /tmp/debian-chroot
 mkdir /tmp/debian-chroot/lost+found
 {{ CMD }} --mode=root --variant=apt {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 rmdir /tmp/debian-chroot/lost+found
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
--- a/tests/existing-empty-directory
+++ b/tests/existing-empty-directory
@ -1,7 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot" EXIT INT TERM
 mkdir /tmp/debian-chroot
 {{ CMD }} --mode=root --variant=apt {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
--- a/tests/fail-installing-to-existing-file
+++ b/tests/fail-installing-to-existing-file
@ -1,10 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 touch /tmp/exists
 ret=0
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/exists {{ MIRROR }} || ret=$?
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
--- a/tests/fail-installing-to-non-empty-lost-found
+++ b/tests/fail-installing-to-non-empty-lost-found
@ -1,13 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm /tmp/debian-chroot/lost+found/exists; rmdir /tmp/debian-chroot/lost+found /tmp/debian-chroot" EXIT INT TERM
 mkdir /tmp/debian-chroot
 mkdir /tmp/debian-chroot/lost+found
 touch /tmp/debian-chroot/lost+found/exists
 ret=0
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/debian-chroot {{ MIRROR }} || ret=$?
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
--- a/tests/fail-installing-to-non-empty-target-directory
+++ b/tests/fail-installing-to-non-empty-target-directory
@ -1,13 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rmdir /tmp/debian-chroot/lost+found; rm /tmp/debian-chroot/exists; rmdir /tmp/debian-chroot" EXIT INT TERM
 mkdir /tmp/debian-chroot
 mkdir /tmp/debian-chroot/lost+found
 touch /tmp/debian-chroot/exists
 ret=0
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/debian-chroot {{ MIRROR }} || ret=$?
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
--- a/tests/fail-installing-to-root
+++ b/tests/fail-installing-to-root
@ -1,9 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 ret=0
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} / {{ MIRROR }} || ret=$?
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
--- a/tests/fail-with-missing-lz4
+++ b/tests/fail-with-missing-lz4
@ -1,9 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 ret=0
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/debian-chroot.tar.lz4 {{ MIRROR }} || ret=$?
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
--- a/tests/fail-with-path-with-quotes
+++ b/tests/fail-with-path-with-quotes
@ -1,9 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 ret=0
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/quoted\"path {{ MIRROR }} || ret=$?
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
--- a/tests/fail-without-etc-subuid
+++ b/tests/fail-without-etc-subuid
@ -1,17 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 adduser --gecos user --disabled-password user
 sysctl -w kernel.unprivileged_userns_clone=1
 rm /etc/subuid
 ret=0
 runuser -u user -- {{ CMD }} --mode=unshare --variant=apt {{ DIST }} /tmp/debian-chroot {{ MIRROR }} || ret=$?
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
 rm -r /tmp/debian-chroot
--- a/tests/fail-without-username-in-etc-subuid
+++ b/tests/fail-without-username-in-etc-subuid
@ -1,18 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 adduser --gecos user --disabled-password user
 sysctl -w kernel.unprivileged_userns_clone=1
 awk -F: '$1!="user"' /etc/subuid > /etc/subuid.tmp
 mv /etc/subuid.tmp /etc/subuid
 ret=0
 runuser -u user -- {{ CMD }} --mode=unshare --variant=apt {{ DIST }} /tmp/debian-chroot {{ MIRROR }} || ret=$?
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
 rm -r /tmp/debian-chroot
--- a/tests/failing-customize-hook
+++ b/tests/failing-customize-hook
@ -1,10 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 ret=0
 {{ CMD }} --mode=root --variant=apt --customize-hook='chroot "$1" sh -c "exit 1"' {{ DIST }} /tmp/debian-chroot {{ MIRROR }} || ret=$?
 rm -r /tmp/debian-chroot
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
--- a/tests/file-mirror
+++ b/tests/file-mirror
@ -1,10 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test requires the cache directory to be mounted on /mnt and should only be run inside a container" >&2
 	exit 1
 fi
 {{ CMD }} --mode={{ MODE }} --variant=apt --setup-hook='mkdir -p "$1"/mnt/cache/debian; mount -o ro,bind /mnt/cache/debian "$1"/mnt/cache/debian' --customize-hook='umount "$1"/mnt/cache/debian; rmdir "$1"/mnt/cache/debian "$1"/mnt/cache' {{ DIST }} /tmp/debian-chroot.tar "deb file:///mnt/cache/debian {{ DIST }} main"
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar
--- a/tests/file-mirror-automount-hook
+++ b/tests/file-mirror-automount-hook
@ -1,20 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test requires the cache directory to be mounted on /mnt and should only be run inside a container" >&2
 	exit 1
 fi
 if [ "$(id -u)" -eq 0 ] && ! id -u user > /dev/null 2>&1; then
 	adduser --gecos user --disabled-password user
 fi
 prefix=
 [ "$(id -u)" -eq 0 ] && [ "{{ MODE }}" != "root" ] && prefix="runuser -u user --"
 [ "{{ MODE }}" = "fakechroot" ] && prefix="$prefix fakechroot fakeroot"
 $prefix {{ CMD }} --mode={{ MODE }} --variant=apt \
 	--hook-dir=./hooks/file-mirror-automount \
 	--customize-hook='[ ! -e "$1"/mnt/cache/debian/ ] || rmdir "$1"/mnt/cache/debian/' \
 	--customize-hook='rmdir "$1"/mnt/cache' \
 	{{ DIST }} /tmp/debian-chroot.tar "deb file:///mnt/cache/debian {{ DIST }} main"
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar
--- a/tests/help
+++ b/tests/help
@ -1,6 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 # we redirect to /dev/null instead of using --quiet to not cause a broken pipe
 # when grep exits before mmdebstrap was able to write all its output
 {{ CMD }} --help | grep --fixed-strings 'mmdebstrap [OPTION...] [SUITE [TARGET [MIRROR...]]]' >/dev/null
--- a/tests/hook-directory
+++ b/tests/hook-directory
@ -1,49 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 for h in hookA hookB; do
 	mkdir /tmp/$h
 	for s in setup extract essential customize; do
 		cat << SCRIPT > /tmp/$h/${s}00.sh
 #!/bin/sh
 echo $h/${s}00 >> "\$1/$s"
 SCRIPT
 		chmod +x /tmp/$h/${s}00.sh
 		cat << SCRIPT > /tmp/$h/${s}01.sh
 echo $h/${s}01 >> "\$1/$s"
 SCRIPT
 		chmod +x /tmp/$h/${s}01.sh
 	done
 done
 {{ CMD }} --mode=root --variant=apt \
 	--setup-hook='echo cliA/setup >> "$1"/setup' \
 	--extract-hook='echo cliA/extract >> "$1"/extract' \
 	--essential-hook='echo cliA/essential >> "$1"/essential' \
 	--customize-hook='echo cliA/customize >> "$1"/customize' \
 	--hook-dir=/tmp/hookA \
 	--setup-hook='echo cliB/setup >> "$1"/setup' \
 	--extract-hook='echo cliB/extract >> "$1"/extract' \
 	--essential-hook='echo cliB/essential >> "$1"/essential' \
 	--customize-hook='echo cliB/customize >> "$1"/customize' \
 	--hook-dir=/tmp/hookB \
 	--setup-hook='echo cliC/setup >> "$1"/setup' \
 	--extract-hook='echo cliC/extract >> "$1"/extract' \
 	--essential-hook='echo cliC/essential >> "$1"/essential' \
 	--customize-hook='echo cliC/customize >> "$1"/customize' \
 	 {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 printf "cliA/setup\nhookA/setup00\nhookA/setup01\ncliB/setup\nhookB/setup00\nhookB/setup01\ncliC/setup\n" | diff -u - /tmp/debian-chroot/setup
 printf "cliA/extract\nhookA/extract00\nhookA/extract01\ncliB/extract\nhookB/extract00\nhookB/extract01\ncliC/extract\n" | diff -u - /tmp/debian-chroot/extract
 printf "cliA/essential\nhookA/essential00\nhookA/essential01\ncliB/essential\nhookB/essential00\nhookB/essential01\ncliC/essential\n" | diff -u - /tmp/debian-chroot/essential
 printf "cliA/customize\nhookA/customize00\nhookA/customize01\ncliB/customize\nhookB/customize00\nhookB/customize01\ncliC/customize\n" | diff -u - /tmp/debian-chroot/customize
 for s in setup extract essential customize; do
 	rm /tmp/debian-chroot/$s
 done
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
 for h in hookA hookB; do
 	for s in setup extract essential customize; do
 		rm /tmp/$h/${s}00.sh
 		rm /tmp/$h/${s}01.sh
 	done
 	rmdir /tmp/$h
 done
 rm -r /tmp/debian-chroot
--- a/tests/i386-which-can-be-executed-without-qemu
+++ b/tests/i386-which-can-be-executed-without-qemu
@ -1,38 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 # remove qemu just to be sure
 apt-get remove --yes qemu-user-static binfmt-support qemu-user
 {{ CMD }} --mode={{ MODE }} --variant=apt --architectures=i386 {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 # we ignore differences between architectures by ignoring some files
 # and renaming others
 { tar -tf /tmp/debian-chroot.tar \
 	| grep -v '^\./usr/bin/i386$' \
 	| grep -v '^\./lib/ld-linux\.so\.2$' \
 	| grep -v '^\./lib/i386-linux-gnu/ld-linux\.so\.2$' \
 	| grep -v '^\./usr/lib/gcc/i686-linux-gnu/$' \
 	| grep -v '^\./usr/lib/gcc/i686-linux-gnu/[0-9]\+/$' \
 	| grep -v '^\./usr/share/man/man8/i386\.8\.gz$' \
 	| grep -v '^\./usr/share/doc/[^/]\+/changelog\(\.Debian\)\?\.i386\.gz$' \
 	| sed 's/i386-linux-gnu/x86_64-linux-gnu/' \
 	| sed 's/i386/amd64/';
 } | sort > tar2.txt
 { cat tar1.txt \
 	| grep -v '^\./usr/bin/i386$' \
 	| grep -v '^\./usr/bin/x86_64$' \
 	| grep -v '^\./lib64/$' \
 	| grep -v '^\./lib64/ld-linux-x86-64\.so\.2$' \
 	| grep -v '^\./usr/lib/gcc/x86_64-linux-gnu/$' \
 	| grep -v '^\./usr/lib/gcc/x86_64-linux-gnu/[0-9]\+/$' \
 	| grep -v '^\./lib/x86_64-linux-gnu/ld-linux-x86-64\.so\.2$' \
 	| grep -v '^\./lib/x86_64-linux-gnu/libmvec-2\.[0-9]\+\.so$' \
 	| grep -v '^\./lib/x86_64-linux-gnu/libmvec\.so\.1$' \
 	| grep -v '^\./usr/share/doc/[^/]\+/changelog\(\.Debian\)\?\.amd64\.gz$' \
 	| grep -v '^\./usr/share/man/man8/i386\.8\.gz$' \
 	| grep -v '^\./usr/share/man/man8/x86_64\.8\.gz$';
 } | sort | diff -u - tar2.txt
 rm /tmp/debian-chroot.tar
--- a/tests/include
+++ b/tests/include
@ -1,12 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot" EXIT INT TERM
 {{ CMD }} --mode=root --variant=apt --include=doc-debian {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 rm /tmp/debian-chroot/usr/share/doc-base/debian-*
 rm -r /tmp/debian-chroot/usr/share/doc/debian
 rm -r /tmp/debian-chroot/usr/share/doc/doc-debian
 rm /tmp/debian-chroot/var/lib/apt/extended_states
 rm /tmp/debian-chroot/var/lib/dpkg/info/doc-debian.list
 rm /tmp/debian-chroot/var/lib/dpkg/info/doc-debian.md5sums
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
--- a/tests/include-libmagic-mgc-arm64
+++ b/tests/include-libmagic-mgc-arm64
@ -1,29 +0,0 @@
 #!/bin/sh
 #
 # to test foreign architecture package installation we choose a package which
 #   - is not part of the native installation set
 #   - does not have any dependencies
 #   - installs only few files
 #   - doesn't change its name regularly (like gcc-*-base)
 set -eu
 export LC_ALL=C.UTF-8
 {{ CMD }} --mode=root --variant=apt --architectures=amd64,arm64 --include=libmagic-mgc:arm64 {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 { echo "amd64"; echo "arm64"; } | cmp /tmp/debian-chroot/var/lib/dpkg/arch -
 rm /tmp/debian-chroot/var/lib/dpkg/arch
 rm /tmp/debian-chroot/var/lib/apt/extended_states
 rm /tmp/debian-chroot/var/lib/dpkg/info/libmagic-mgc.list
 rm /tmp/debian-chroot/var/lib/dpkg/info/libmagic-mgc.md5sums
 rm /tmp/debian-chroot/usr/lib/file/magic.mgc
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/README.Debian
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/changelog.Debian.gz
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/changelog.gz
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/copyright
 rm /tmp/debian-chroot/usr/share/file/magic.mgc
 rm /tmp/debian-chroot/usr/share/misc/magic.mgc
 rmdir /tmp/debian-chroot/usr/share/doc/libmagic-mgc/
 rmdir /tmp/debian-chroot/usr/share/file/magic/
 rmdir /tmp/debian-chroot/usr/share/file/
 rmdir /tmp/debian-chroot/usr/lib/file/
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
 rm -r /tmp/debian-chroot
--- a/tests/include-libmagic-mgc-arm64-with-multiple-arch-options
+++ b/tests/include-libmagic-mgc-arm64-with-multiple-arch-options
@ -1,22 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 {{ CMD }} --mode=root --variant=apt --architectures=amd64 --architectures=arm64 --include=libmagic-mgc:arm64 {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 { echo "amd64"; echo "arm64"; } | cmp /tmp/debian-chroot/var/lib/dpkg/arch -
 rm /tmp/debian-chroot/var/lib/dpkg/arch
 rm /tmp/debian-chroot/var/lib/apt/extended_states
 rm /tmp/debian-chroot/var/lib/dpkg/info/libmagic-mgc.list
 rm /tmp/debian-chroot/var/lib/dpkg/info/libmagic-mgc.md5sums
 rm /tmp/debian-chroot/usr/lib/file/magic.mgc
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/README.Debian
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/changelog.Debian.gz
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/changelog.gz
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/copyright
 rm /tmp/debian-chroot/usr/share/file/magic.mgc
 rm /tmp/debian-chroot/usr/share/misc/magic.mgc
 rmdir /tmp/debian-chroot/usr/share/doc/libmagic-mgc/
 rmdir /tmp/debian-chroot/usr/share/file/magic/
 rmdir /tmp/debian-chroot/usr/share/file/
 rmdir /tmp/debian-chroot/usr/lib/file/
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
 rm -r /tmp/debian-chroot
--- a/tests/include-with-multiple-apt-sources
+++ b/tests/include-with-multiple-apt-sources
@ -1,10 +0,0 @@
 #!/bin/sh
 #
 # This checks for https://bugs.debian.org/976166
 # Since $DEFAULT_DIST varies, we hardcode stable and unstable.
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot" EXIT INT TERM
 {{ CMD }} --mode=root --variant=minbase --include=doc-debian unstable /tmp/debian-chroot "deb {{ MIRROR }} unstable main" "deb {{ MIRROR }} stable main"
 chroot /tmp/debian-chroot dpkg-query --show doc-debian
--- a/tests/install-busybox-based-sub-essential-system
+++ b/tests/install-busybox-based-sub-essential-system
@ -1,33 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 pkgs=base-files,base-passwd,busybox,debianutils,dpkg,libc-bin,mawk,tar
 # busybox --install -s will install symbolic links into the rootfs, leaving
 # existing files untouched. It has to run after extraction (otherwise there is
 # no busybox binary) and before first configuration
 {{ CMD }} --mode=root --variant=custom \
    --include=$pkgs \
    --setup-hook='mkdir -p "$1/bin"' \
    --setup-hook='echo root:x:0:0:root:/root:/bin/sh > "$1/etc/passwd"' \
    --setup-hook='printf "root:x:0:\nmail:x:8:\nutmp:x:43:\n" > "$1/etc/group"' \
    --extract-hook='chroot "$1" busybox --install -s' \
    {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 echo "$pkgs" | tr ',' '\n' > /tmp/expected
 chroot /tmp/debian-chroot dpkg-query -f '${binary:Package}\n' -W \
 	| comm -12 - /tmp/expected \
 	| diff -u - /tmp/expected
 rm /tmp/expected
 for cmd in echo cat sed grep; do
 	test -L /tmp/debian-chroot/bin/$cmd
 	test "$(readlink /tmp/debian-chroot/bin/$cmd)" = "/bin/busybox"
 done
 for cmd in sort; do
 	test -L /tmp/debian-chroot/usr/bin/$cmd
 	test "$(readlink /tmp/debian-chroot/usr/bin/$cmd)" = "/bin/busybox"
 done
 chroot /tmp/debian-chroot echo foobar \
 	| chroot /tmp/debian-chroot cat \
 	| chroot /tmp/debian-chroot sort \
 	| chroot /tmp/debian-chroot sed 's/foobar/blubber/' \
 	| chroot /tmp/debian-chroot grep blubber >/dev/null
 rm -r /tmp/debian-chroot
--- a/tests/install-doc-debian
+++ b/tests/install-doc-debian
@ -1,46 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ "$(id -u)" -eq 0 ] && ! id -u user > /dev/null 2>&1; then
 	if [ ! -e /mmdebstrap-testenv ]; then
 		echo "this test modifies the system and should only be run inside a container" >&2
 		exit 1
 	fi
 	adduser --gecos user --disabled-password user
 fi
 prefix=
 [ "$(id -u)" -eq 0 ] && prefix="runuser -u user --"
 $prefix {{ CMD }} --mode=chrootless --variant=custom --include=doc-debian {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 tar -C /tmp/debian-chroot --owner=0 --group=0 --numeric-owner --sort=name --clamp-mtime --mtime=$(date --utc --date=@{{ SOURCE_DATE_EPOCH }} --iso-8601=seconds) -cf /tmp/debian-chroot.tar .
 tar tvf /tmp/debian-chroot.tar > doc-debian.tar.list
 rm /tmp/debian-chroot.tar
 # delete contents of doc-debian
 rm /tmp/debian-chroot/usr/share/doc-base/debian-*
 rm -r /tmp/debian-chroot/usr/share/doc/debian
 rm -r /tmp/debian-chroot/usr/share/doc/doc-debian
 # delete real files
 rm /tmp/debian-chroot/etc/apt/sources.list
 rm /tmp/debian-chroot/etc/fstab
 rm /tmp/debian-chroot/etc/hostname
 rm /tmp/debian-chroot/etc/resolv.conf
 rm /tmp/debian-chroot/var/lib/dpkg/status
 rm /tmp/debian-chroot/var/cache/apt/archives/lock
 rm /tmp/debian-chroot/var/lib/dpkg/lock
 rm /tmp/debian-chroot/var/lib/dpkg/lock-frontend
 rm /tmp/debian-chroot/var/lib/apt/lists/lock
 ## delete merged usr symlinks
 #rm /tmp/debian-chroot/libx32
 #rm /tmp/debian-chroot/lib64
 #rm /tmp/debian-chroot/lib32
 #rm /tmp/debian-chroot/sbin
 #rm /tmp/debian-chroot/bin
 #rm /tmp/debian-chroot/lib
 # in chrootless mode, there is more to remove
 rm /tmp/debian-chroot/var/lib/dpkg/triggers/Lock
 rm /tmp/debian-chroot/var/lib/dpkg/triggers/Unincorp
 rm /tmp/debian-chroot/var/lib/dpkg/status-old
 rm /tmp/debian-chroot/var/lib/dpkg/info/format
 rm /tmp/debian-chroot/var/lib/dpkg/info/doc-debian.md5sums
 rm /tmp/debian-chroot/var/lib/dpkg/info/doc-debian.list
 # the rest should be empty directories that we can rmdir recursively
 find /tmp/debian-chroot -depth -print0 | xargs -0 rmdir
--- a/tests/install-doc-debian-and-output-tarball
+++ b/tests/install-doc-debian-and-output-tarball
@ -1,16 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 export SOURCE_DATE_EPOCH={{ SOURCE_DATE_EPOCH }}
 if [ "$(id -u)" -eq 0 ] && ! id -u user > /dev/null 2>&1; then
 	if [ ! -e /mmdebstrap-testenv ]; then
 		echo "this test modifies the system and should only be run inside a container" >&2
 		exit 1
 	fi
 	adduser --gecos user --disabled-password user
 fi
 prefix=
 [ "$(id -u)" -eq 0 ] && prefix="runuser -u user --"
 $prefix {{ CMD }} --mode=chrootless --variant=custom --include=doc-debian {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 tar tvf /tmp/debian-chroot.tar | grep -v ' ./dev' | diff -u doc-debian.tar.list -
 rm /tmp/debian-chroot.tar
--- a/tests/install-doc-debian-and-test-hooks
+++ b/tests/install-doc-debian-and-test-hooks
@ -1,49 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 export SOURCE_DATE_EPOCH={{ SOURCE_DATE_EPOCH }}
 if [ "$(id -u)" -eq 0 ] && ! id -u user > /dev/null 2>&1; then
 	if [ ! -e /mmdebstrap-testenv ]; then
 		echo "this test modifies the system and should only be run inside a container" >&2
 		exit 1
 	fi
 	adduser --gecos user --disabled-password user
 fi
 prefix=
 [ "$(id -u)" -eq 0 ] && prefix="runuser -u user --"
 $prefix {{ CMD }} --mode=chrootless --skip=cleanup/tmp --variant=custom --include=doc-debian --setup-hook='touch "$1/tmp/setup"' --customize-hook='touch "$1/tmp/customize"' {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 rm /tmp/debian-chroot/tmp/setup
 rm /tmp/debian-chroot/tmp/customize
 tar -C /tmp/debian-chroot --owner=0 --group=0 --numeric-owner --sort=name --clamp-mtime --mtime=$(date --utc --date=@{{ SOURCE_DATE_EPOCH }} --iso-8601=seconds) -cf /tmp/debian-chroot.tar .
 tar tvf /tmp/debian-chroot.tar | grep -v ' ./dev' | diff -u doc-debian.tar.list -
 rm /tmp/debian-chroot.tar
 # delete contents of doc-debian
 rm /tmp/debian-chroot/usr/share/doc-base/debian-*
 rm -r /tmp/debian-chroot/usr/share/doc/debian
 rm -r /tmp/debian-chroot/usr/share/doc/doc-debian
 # delete real files
 rm /tmp/debian-chroot/etc/apt/sources.list
 rm /tmp/debian-chroot/etc/fstab
 rm /tmp/debian-chroot/etc/hostname
 rm /tmp/debian-chroot/etc/resolv.conf
 rm /tmp/debian-chroot/var/lib/dpkg/status
 rm /tmp/debian-chroot/var/cache/apt/archives/lock
 rm /tmp/debian-chroot/var/lib/dpkg/lock
 rm /tmp/debian-chroot/var/lib/dpkg/lock-frontend
 rm /tmp/debian-chroot/var/lib/apt/lists/lock
 ## delete merged usr symlinks
 #rm /tmp/debian-chroot/libx32
 #rm /tmp/debian-chroot/lib64
 #rm /tmp/debian-chroot/lib32
 #rm /tmp/debian-chroot/sbin
 #rm /tmp/debian-chroot/bin
 #rm /tmp/debian-chroot/lib
 # in chrootless mode, there is more to remove
 rm /tmp/debian-chroot/var/lib/dpkg/triggers/Lock
 rm /tmp/debian-chroot/var/lib/dpkg/triggers/Unincorp
 rm /tmp/debian-chroot/var/lib/dpkg/status-old
 rm /tmp/debian-chroot/var/lib/dpkg/info/format
 rm /tmp/debian-chroot/var/lib/dpkg/info/doc-debian.md5sums
 rm /tmp/debian-chroot/var/lib/dpkg/info/doc-debian.list
 # the rest should be empty directories that we can rmdir recursively
 find /tmp/debian-chroot -depth -print0 | xargs -0 rmdir
--- a/tests/install-known-good-from-essential-yes
+++ b/tests/install-known-good-from-essential-yes
@ -1,43 +0,0 @@
 #!/bin/sh
 #
 # regularly check whether more packages work with chrootless:
 # for p in $(grep-aptavail -F Essential yes -s Package -n | sort -u); do ./mmdebstrap --             mode=chrootless --variant=custom --include=bsdutils,coreutils,debianutils,diffutils,dpkg,            findutils,grep,gzip,hostname,init-system-helpers,ncurses-base,ncurses-bin,perl-base,sed,             sysvinit-utils,tar,$p unstable /dev/null; done
 #
 # see https://bugs.debian.org/cgi-bin/pkgreport.cgi?users=debian-dpkg@lists.debian.org;tag=dpkg-     root-support
 #
 # base-files: #824594
 # base-passwd: debconf
 # bash: depends base-files
 # bsdutils: ok
 # coreutils: ok
 # dash: debconf
 # debianutils: ok
 # diffutils: ok
 # dpkg: ok
 # findutils: ok
 # grep: ok
 # gzip: ok
 # hostname: ok
 # init-system-helpers: ok
 # libc-bin: #983412
 # login: debconf
 # ncurses-base: ok
 # ncurses-bin: ok
 # perl-base: ok
 # sed: ok
 # sysvinit-utils: ok
 # tar: ok
 # util-linux: debconf
 set -eu
 export LC_ALL=C.UTF-8
 if [ "$(id -u)" -eq 0 ] && ! id -u user > /dev/null 2>&1; then
 	if [ ! -e /mmdebstrap-testenv ]; then
 		echo "this test modifies the system and should only be run inside a container" >&2
 		exit 1
 	fi
 	adduser --gecos user --disabled-password user
 fi
 prefix=
 [ "$(id -u)" -eq 0 ] && prefix="runuser -u user --"
 $prefix {{ CMD }} --mode=chrootless --variant=custom --include=bsdutils,coreutils,debianutils,diffutils,dpkg,findutils,grep,gzip,hostname,init-system-helpers,ncurses-base,ncurses-bin,perl-base,sed,sysvinit-utils,tar {{ DIST }} /dev/null {{ MIRROR }}
--- a/tests/install-libmagic-mgc-on-arm64
+++ b/tests/install-libmagic-mgc-on-arm64
@ -1,48 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ "$(id -u)" -eq 0 ] && ! id -u user > /dev/null 2>&1; then
 	if [ ! -e /mmdebstrap-testenv ]; then
 		echo "this test modifies the system and should only be run inside a container" >&2
 		exit 1
 	fi
 	adduser --gecos user --disabled-password user
 fi
 prefix=
 [ "$(id -u)" -eq 0 ] && prefix="runuser -u user --"
 $prefix {{ CMD }} --mode=chrootless --variant=custom --architectures=arm64 --include=libmagic-mgc {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 # delete contents of libmagic-mgc
 rm /tmp/debian-chroot/usr/lib/file/magic.mgc
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/README.Debian
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/changelog.Debian.gz
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/changelog.gz
 rm /tmp/debian-chroot/usr/share/doc/libmagic-mgc/copyright
 rm /tmp/debian-chroot/usr/share/file/magic.mgc
 rm /tmp/debian-chroot/usr/share/misc/magic.mgc
 # delete real files
 rm /tmp/debian-chroot/etc/apt/sources.list
 rm /tmp/debian-chroot/etc/fstab
 rm /tmp/debian-chroot/etc/hostname
 rm /tmp/debian-chroot/etc/resolv.conf
 rm /tmp/debian-chroot/var/lib/dpkg/status
 rm /tmp/debian-chroot/var/cache/apt/archives/lock
 rm /tmp/debian-chroot/var/lib/dpkg/lock
 rm /tmp/debian-chroot/var/lib/dpkg/lock-frontend
 rm /tmp/debian-chroot/var/lib/apt/lists/lock
 ## delete merged usr symlinks
 #rm /tmp/debian-chroot/libx32
 #rm /tmp/debian-chroot/lib64
 #rm /tmp/debian-chroot/lib32
 #rm /tmp/debian-chroot/sbin
 #rm /tmp/debian-chroot/bin
 #rm /tmp/debian-chroot/lib
 # in chrootless mode, there is more to remove
 rm /tmp/debian-chroot/var/lib/dpkg/arch
 rm /tmp/debian-chroot/var/lib/dpkg/triggers/Lock
 rm /tmp/debian-chroot/var/lib/dpkg/triggers/Unincorp
 rm /tmp/debian-chroot/var/lib/dpkg/status-old
 rm /tmp/debian-chroot/var/lib/dpkg/info/format
 rm /tmp/debian-chroot/var/lib/dpkg/info/libmagic-mgc.md5sums
 rm /tmp/debian-chroot/var/lib/dpkg/info/libmagic-mgc.list
 # the rest should be empty directories that we can rmdir recursively
 find /tmp/debian-chroot -depth -print0 | xargs -0 rmdir
--- a/tests/invalid-mirror
+++ b/tests/invalid-mirror
@ -1,10 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 ret=0
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}/invalid || ret=$?
 rm /tmp/debian-chroot.tar
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
--- a/tests/keyring
+++ b/tests/keyring
@ -1,13 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 rm /etc/apt/trusted.gpg.d/*.gpg
 {{ CMD }} --mode=root --variant=apt --keyring=/usr/share/keyrings/debian-archive-keyring.gpg --keyring=/usr/share/keyrings/ {{ DIST }} /tmp/debian-chroot "deb {{ MIRROR }} {{ DIST }} main"
 # make sure that no [signedby=...] managed to make it into the sources.list
 echo "deb {{ MIRROR }} {{ DIST }} main" | cmp /tmp/debian-chroot/etc/apt/sources.list -
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
 rm -r /tmp/debian-chroot
--- a/tests/keyring-overwrites
+++ b/tests/keyring-overwrites
@ -1,15 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot; rmdir /tmp/emptydir; rm -f /tmp/emptyfile" EXIT INT TERM
 mkdir -p /tmp/emptydir
 touch /tmp/emptyfile
 # this overwrites the apt keyring options and should fail
 ret=0
 {{ CMD }} --mode=root --variant=apt --keyring=/tmp/emptydir --keyring=/tmp/emptyfile {{ DIST }} /tmp/debian-chroot "deb {{ MIRROR }} {{ DIST }} main" || ret=$?
 # make sure that no [signedby=...] managed to make it into the sources.list
 echo "deb {{ MIRROR }} {{ DIST }} main" | cmp /tmp/debian-chroot/etc/apt/sources.list -
 if [ "$ret" = 0 ]; then
 	echo expected failure but got exit $ret >&2
 	exit 1
 fi
--- a/tests/logfile
+++ b/tests/logfile
@ -1,20 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 # we check the full log to also prevent debug printfs to accidentally make it into a commit
 {{ CMD }} --mode=root --variant=apt --logfile=/tmp/log {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 # omit the last line which should contain the runtime
 head --lines=-1 /tmp/log > /tmp/trimmed
 cat << LOG | diff -u - /tmp/trimmed
 I: chroot architecture {{ HOSTARCH }} is equal to the host's architecture
 I: automatically chosen format: directory
 I: running apt-get update...
 I: downloading packages with apt...
 I: extracting archives...
 I: installing essential packages...
 I: cleaning package lists and apt cache...
 LOG
 tail --lines=1 /tmp/log | grep '^I: success in .* seconds$'
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
 rm -r /tmp/debian-chroot
 rm /tmp/log /tmp/trimmed
--- a/tests/man
+++ b/tests/man
@ -1,7 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 # we redirect to /dev/null instead of using --quiet to not cause a broken pipe
 # when grep exits before mmdebstrap was able to write all its output
 {{ CMD }} --man | grep --fixed-strings 'mmdebstrap [OPTION...] [*SUITE* [*TARGET* [*MIRROR*...]]]' >/dev/null
--- a/tests/merged-usr-via-setup-hook
+++ b/tests/merged-usr-via-setup-hook
@ -1,50 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot" EXIT INT TERM
 {{ CMD }} --mode=root --variant=apt \
 	--essential-hook=./hooks/merged-usr/essential00.sh \
 	--setup-hook=./hooks/merged-usr/setup00.sh \
 	--customize-hook='[ -L "$1"/bin -a -L "$1"/sbin -a -L "$1"/lib ]' \
 	{{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort > tar2.txt
 {
 	sed -e 's/^\.\/bin\//.\/usr\/bin\//;s/^\.\/lib\//.\/usr\/lib\//;s/^\.\/sbin\//.\/usr\/sbin\//;' tar1.txt | {
 		case {{ HOSTARCH }} in
 		amd64) sed -e 's/^\.\/lib32\//.\/usr\/lib32\//;s/^\.\/lib64\//.\/usr\/lib64\//;s/^\.\/libx32\//.\/usr\/libx32\//;';;
 		ppc64el) sed -e 's/^\.\/lib64\//.\/usr\/lib64\//;';;
 		*) cat;;
 		esac
 	};
 	echo ./bin;
 	echo ./lib;
 	echo ./sbin;
 	case {{ HOSTARCH }} in
 	amd64)
 		echo ./lib32;
 		echo ./lib64;
 		echo ./libx32;
 		echo ./usr/lib32/;
 		echo ./usr/libx32/;
 		;;
 	i386)
 		echo ./lib64;
 		echo ./libx32;
 		echo ./usr/lib64/;
 		echo ./usr/libx32/;
 		;;
 	ppc64el)
 		echo ./lib64;
 		;;
 	s390x)
 		echo ./lib32;
 		echo ./usr/lib32/;
 		;;
 	esac
 	echo ./usr/share/doc/usr-is-merged/
 	echo ./usr/share/doc/usr-is-merged/changelog.gz
 	echo ./usr/share/doc/usr-is-merged/copyright
 	echo ./var/lib/dpkg/info/usr-is-merged.list
 	echo ./var/lib/dpkg/info/usr-is-merged.md5sums
 	echo ./var/lib/dpkg/info/usr-is-merged.preinst
 } | sort -u | diff -u - tar2.txt
--- a/tests/mirror-is-deb
+++ b/tests/mirror-is-deb
@ -1,6 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -f /tmp/debian-chroot.tar" EXIT INT TERM
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/debian-chroot.tar "deb {{ MIRROR }} {{ DIST }} main"
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
--- a/tests/mirror-is-real-file
+++ b/tests/mirror-is-real-file
@ -1,9 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -f /tmp/debian-chroot.tar /tmp/sources.list" EXIT INT TERM
 echo "deb {{ MIRROR }} {{ DIST }} main" > /tmp/sources.list
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/debian-chroot.tar /tmp/sources.list
 tar -tf /tmp/debian-chroot.tar \
 	| sed 's#^./etc/apt/sources.list.d/0000sources.list$#./etc/apt/sources.list#' \
 	| sort | diff -u tar1.txt -
--- a/tests/mirror-is-stdin
+++ b/tests/mirror-is-stdin
@ -1,6 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -f /tmp/debian-chroot.tar" EXIT INT TERM
 echo "deb {{ MIRROR }} {{ DIST }} main" | {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/debian-chroot.tar -
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
--- a/tests/missing-dev-sys-proc-inside-the-chroot
+++ b/tests/missing-dev-sys-proc-inside-the-chroot
@ -1,10 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 adduser --gecos user --disabled-password user
 sysctl -w kernel.unprivileged_userns_clone=1
 runuser -u user -- {{ CMD }} --mode=unshare --variant=custom --include=dpkg,dash,diffutils,coreutils,libc-bin,sed {{ DIST }} /dev/null {{ MIRROR }}
--- a/tests/missing-device-nodes-outside-the-chroot
+++ b/tests/missing-device-nodes-outside-the-chroot
@ -1,13 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 rm /dev/console
 adduser --gecos user --disabled-password user
 sysctl -w kernel.unprivileged_userns_clone=1
 runuser -u user -- {{ CMD }} --mode=unshare --variant=apt {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar
--- a/tests/mount-is-missing
+++ b/tests/mount-is-missing
@ -1,13 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 for p in /bin /usr/bin /sbin /usr/sbin; do
 	rm -f "$p/mount"
 done
 {{ CMD }} --mode=root --variant=apt {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar
--- a/tests/multiple-include
+++ b/tests/multiple-include
@ -1,23 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -rf /tmp/debian-chroot" EXIT INT TERM
 {{ CMD }} --mode=root --variant=apt --include=doc-debian --include=tzdata {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 rm /tmp/debian-chroot/usr/share/doc-base/debian-*
 rm -r /tmp/debian-chroot/usr/share/doc/debian
 rm -r /tmp/debian-chroot/usr/share/doc/doc-debian
 rm /tmp/debian-chroot/etc/localtime
 rm /tmp/debian-chroot/etc/timezone
 rm /tmp/debian-chroot/usr/sbin/tzconfig
 rm -r /tmp/debian-chroot/usr/share/doc/tzdata
 rm -r /tmp/debian-chroot/usr/share/zoneinfo
 rm /tmp/debian-chroot/var/lib/apt/extended_states
 rm /tmp/debian-chroot/var/lib/dpkg/info/doc-debian.list
 rm /tmp/debian-chroot/var/lib/dpkg/info/doc-debian.md5sums
 rm /tmp/debian-chroot/var/lib/dpkg/info/tzdata.list
 rm /tmp/debian-chroot/var/lib/dpkg/info/tzdata.md5sums
 rm /tmp/debian-chroot/var/lib/dpkg/info/tzdata.config
 rm /tmp/debian-chroot/var/lib/dpkg/info/tzdata.postinst
 rm /tmp/debian-chroot/var/lib/dpkg/info/tzdata.postrm
 rm /tmp/debian-chroot/var/lib/dpkg/info/tzdata.templates
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
--- a/tests/no-sbin-in-path
+++ b/tests/no-sbin-in-path
@ -1,22 +0,0 @@
 #!/bin/sh
 #
 # If FAKECHROOT_CMD_SUBST sets up wrong substitutions, then binaries cannot be
 # found. For example if /usr/bin/chroot is listed in FAKECHROOT_CMD_SUBST but
 # /usr/sbin (the actual location of the chroot binary) is not in PATH, the
 # command fails
 set -eu
 export LC_ALL=C.UTF-8
 [ "{{ MODE }}" = "fakechroot" ]
 trap "rm -f /tmp/debian-chroot.tar" EXIT INT TERM
 if [ "$(id -u)" -eq 0 ] && ! id -u user > /dev/null 2>&1; then
 	if [ ! -e /mmdebstrap-testenv ]; then
 		echo "this test modifies the system and should only be run inside a container" >&2
 		exit 1
 	fi
 	adduser --gecos user --disabled-password user
 fi
 prefix=
 [ "$(id -u)" -eq 0 ] && prefix="runuser -u user --"
 $prefix env PATH=/usr/bin:/bin fakechroot fakeroot {{ CMD }} --mode=fakechroot --variant=apt {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
--- a/tests/not-having-to-install-apt-in-include-because-a-hook-did-it-before
+++ b/tests/not-having-to-install-apt-in-include-because-a-hook-did-it-before
@ -1,9 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -f /tmp/debian-chroot.tar" EXIT INT TERM
 {{ CMD }} --mode={{ MODE }} --variant=essential --include=apt \
 	--essential-hook='APT_CONFIG=$MMDEBSTRAP_APT_CONFIG apt-get update' \
 	--essential-hook='APT_CONFIG=$MMDEBSTRAP_APT_CONFIG apt-get --yes install -oDPkg::Chroot-Directory="$1" apt' \
 	{{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort | grep -v ./var/lib/apt/extended_states | diff -u tar1.txt -
--- a/tests/pass-distribution-but-implicitly-write-to-stdout
+++ b/tests/pass-distribution-but-implicitly-write-to-stdout
@ -1,14 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 cat << HOSTS >> /etc/hosts
 127.0.0.1 deb.debian.org
 127.0.0.1 security.debian.org
 HOSTS
 {{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} > /tmp/debian-chroot.tar
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar
--- a/tests/preserve-mode-of-etc-resolv-conf-and-etc-hostname
+++ b/tests/preserve-mode-of-etc-resolv-conf-and-etc-hostname
@ -1,99 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 for f in /etc/resolv.conf /etc/hostname; do
 	# preserve original content
 	cat "$f" > "$f.bak"
 	# in case $f is a symlink, we replace it by a real file
 	if [ -L "$f" ]; then
 		rm "$f"
 		cp "$f.bak" "$f"
 	fi
 	chmod 644 "$f"
 	[ "$(stat --format=%A "$f")" = "-rw-r--r--" ]
 done
 {{ CMD }} --variant=custom --mode={{ MODE }} {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 for f in /etc/resolv.conf /etc/hostname; do
 	[ "$(stat --format=%A "/tmp/debian-chroot/$f")" = "-rw-r--r--" ]
 done
 rm /tmp/debian-chroot/dev/console
 rm /tmp/debian-chroot/dev/fd
 rm /tmp/debian-chroot/dev/full
 rm /tmp/debian-chroot/dev/null
 rm /tmp/debian-chroot/dev/ptmx
 rm /tmp/debian-chroot/dev/random
 rm /tmp/debian-chroot/dev/stderr
 rm /tmp/debian-chroot/dev/stdin
 rm /tmp/debian-chroot/dev/stdout
 rm /tmp/debian-chroot/dev/tty
 rm /tmp/debian-chroot/dev/urandom
 rm /tmp/debian-chroot/dev/zero
 rm /tmp/debian-chroot/etc/apt/sources.list
 rm /tmp/debian-chroot/etc/fstab
 rm /tmp/debian-chroot/etc/hostname
 rm /tmp/debian-chroot/etc/resolv.conf
 rm /tmp/debian-chroot/var/lib/apt/lists/lock
 rm /tmp/debian-chroot/var/lib/dpkg/status
 # the rest should be empty directories that we can rmdir recursively
 find /tmp/debian-chroot -depth -print0 | xargs -0 rmdir
 for f in /etc/resolv.conf /etc/hostname; do
 	chmod 755 "$f"
 	[ "$(stat --format=%A "$f")" = "-rwxr-xr-x" ]
 done
 {{ CMD }} --variant=custom --mode={{ MODE }} {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 for f in /etc/resolv.conf /etc/hostname; do
 	[ "$(stat --format=%A "/tmp/debian-chroot/$f")" = "-rwxr-xr-x" ]
 done
 rm /tmp/debian-chroot/dev/console
 rm /tmp/debian-chroot/dev/fd
 rm /tmp/debian-chroot/dev/full
 rm /tmp/debian-chroot/dev/null
 rm /tmp/debian-chroot/dev/ptmx
 rm /tmp/debian-chroot/dev/random
 rm /tmp/debian-chroot/dev/stderr
 rm /tmp/debian-chroot/dev/stdin
 rm /tmp/debian-chroot/dev/stdout
 rm /tmp/debian-chroot/dev/tty
 rm /tmp/debian-chroot/dev/urandom
 rm /tmp/debian-chroot/dev/zero
 rm /tmp/debian-chroot/etc/apt/sources.list
 rm /tmp/debian-chroot/etc/fstab
 rm /tmp/debian-chroot/etc/hostname
 rm /tmp/debian-chroot/etc/resolv.conf
 rm /tmp/debian-chroot/var/lib/apt/lists/lock
 rm /tmp/debian-chroot/var/lib/dpkg/status
 # the rest should be empty directories that we can rmdir recursively
 find /tmp/debian-chroot -depth -print0 | xargs -0 rmdir
 for f in /etc/resolv.conf /etc/hostname; do
 	rm "$f"
 	ln -s "$f.bak" "$f"
 	[ "$(stat --format=%A "$f")" = "lrwxrwxrwx" ]
 done
 {{ CMD }} --variant=custom --mode={{ MODE }} {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 for f in /etc/resolv.conf /etc/hostname; do
 	[ "$(stat --format=%A "/tmp/debian-chroot/$f")" = "-rw-r--r--" ]
 done
 rm /tmp/debian-chroot/dev/console
 rm /tmp/debian-chroot/dev/fd
 rm /tmp/debian-chroot/dev/full
 rm /tmp/debian-chroot/dev/null
 rm /tmp/debian-chroot/dev/ptmx
 rm /tmp/debian-chroot/dev/random
 rm /tmp/debian-chroot/dev/stderr
 rm /tmp/debian-chroot/dev/stdin
 rm /tmp/debian-chroot/dev/stdout
 rm /tmp/debian-chroot/dev/tty
 rm /tmp/debian-chroot/dev/urandom
 rm /tmp/debian-chroot/dev/zero
 rm /tmp/debian-chroot/etc/apt/sources.list
 rm /tmp/debian-chroot/etc/fstab
 rm /tmp/debian-chroot/etc/hostname
 rm /tmp/debian-chroot/etc/resolv.conf
 rm /tmp/debian-chroot/var/lib/apt/lists/lock
 rm /tmp/debian-chroot/var/lib/dpkg/status
 # the rest should be empty directories that we can rmdir recursively
 find /tmp/debian-chroot -depth -print0 | xargs -0 rmdir
--- a/tests/progress-bars-on-fake-tty
+++ b/tests/progress-bars-on-fake-tty
@ -1,6 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -f /tmp/debian-chroot.tar" EXIT INT TERM
 script -qfc "{{ CMD }} --mode={{ MODE }} --variant=apt {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}" /dev/null
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
--- a/tests/quiet
+++ b/tests/quiet
@ -1,6 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 {{ CMD }} --mode=root --variant=apt --quiet {{ DIST }} /tmp/debian-chroot {{ MIRROR }}
 tar -C /tmp/debian-chroot --one-file-system -c . | tar -t | sort | diff -u tar1.txt -
 rm -r /tmp/debian-chroot
--- a/tests/read-from-stdin-write-to-stdout
+++ b/tests/read-from-stdin-write-to-stdout
@ -1,6 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm /tmp/debian-chroot.tar" EXIT INT TERM
 echo "deb {{ MIRROR }} {{ DIST }} main" | {{ CMD }} --mode={{ MODE }} --variant=apt > /tmp/debian-chroot.tar
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
--- a/tests/remove-start-stop-daemon-and-policy-rc-d-in-hook
+++ b/tests/remove-start-stop-daemon-and-policy-rc-d-in-hook
@ -1,6 +0,0 @@
 #!/bin/sh
 set -eu
 export LC_ALL=C.UTF-8
 trap "rm -f /tmp/debian-chroot.tar" EXIT INT TERM
 {{ CMD }} --mode={{ MODE }} --variant=apt --customize-hook='rm "$1/usr/sbin/policy-rc.d"; rm "$1/sbin/start-stop-daemon"' {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
--- a/tests/root-mode-inside-chroot
+++ b/tests/root-mode-inside-chroot
@ -1,26 +0,0 @@
 #!/bin/sh
 #
 # Same as unshare-as-root-user-inside-chroot but this time we run mmdebstrap in
 # root mode from inside a chroot
 set -eu
 export LC_ALL=C.UTF-8
 [ "$(whoami)" = "root" ]
 cat << 'SCRIPT' > script.sh
 #!/bin/sh
 set -eu
 rootfs="$1"
 mkdir -p "$rootfs/mnt"
 [ -e /usr/bin/mmdebstrap ] && cp -aT /usr/bin/mmdebstrap "$rootfs/usr/bin/mmdebstrap"
 [ -e ./mmdebstrap ] && cp -aT ./mmdebstrap "$rootfs/mnt/mmdebstrap"
 chroot "$rootfs" env --chdir=/mnt \
 	{{ CMD }} --mode=root --variant=apt \
 	{{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 SCRIPT
 chmod +x script.sh
 {{ CMD }} --mode=root --variant=apt --include=perl,mount \
 	--customize-hook=./script.sh \
 	--customize-hook="download /tmp/debian-chroot.tar /tmp/debian-chroot.tar" \
 	{{ DIST }} /dev/null {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar script.sh
--- a/tests/root-mode-inside-unshare-chroot
+++ b/tests/root-mode-inside-unshare-chroot
@ -1,32 +0,0 @@
 #!/bin/sh
 #
 # Same as root-mode-inside-chroot but this time we run mmdebstrap in root mode
 # from inside an unshare chroot.
 set -eu
 export LC_ALL=C.UTF-8
 if [ ! -e /mmdebstrap-testenv ]; then
 	echo "this test modifies the system and should only be run inside a container" >&2
 	exit 1
 fi
 [ "$(whoami)" = "root" ]
 adduser --gecos user --disabled-password user
 sysctl -w kernel.unprivileged_userns_clone=1
 cat << 'SCRIPT' > script.sh
 #!/bin/sh
 set -eu
 rootfs="$1"
 mkdir -p "$rootfs/mnt"
 [ -e /usr/bin/mmdebstrap ] && cp -aT /usr/bin/mmdebstrap "$rootfs/usr/bin/mmdebstrap"
 [ -e ./mmdebstrap ] && cp -aT ./mmdebstrap "$rootfs/mnt/mmdebstrap"
 chroot "$rootfs" env --chdir=/mnt \
 	{{ CMD }} --mode=root --variant=apt \
 	{{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
 SCRIPT
 chmod +x script.sh
 runuser -u user -- {{ CMD }} --mode=unshare --variant=apt --include=perl,mount \
 	--customize-hook=./script.sh \
 	--customize-hook="download /tmp/debian-chroot.tar /tmp/debian-chroot.tar" \
 	{{ DIST }} /dev/null {{ MIRROR }}
 tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
 rm /tmp/debian-chroot.tar script.sh
--- a/Show more
+++ b/Show more
		`@ -1,2 +0,0 @@`
			`Johannes Schauer Marin Rodrigues <josch@mister-muffin.de>`
			`Johannes Schauer Marin Rodrigues <josch@mister-muffin.de> <j.schauer@email.de>`