Bug#1107744: libnss-ldapd,debian-edu-config: flaky autopkgtest for debian-edu-config: newly-created group cannot be resolved
Package: libnss-ldapd,debian-edu-config
Severity: important
X-Debbugs-Cc: tytso@mit.edu, debian-ci@lists.debian.org
User: debian-ci@lists.debian.org
Usertags: flaky
As previously discussed in the thread starting at
<https://lists.debian.org/debian-powerpc/2025/06/msg00002.html>,
the autopkgtest for debian-edu-config does not seem to be entirely
stable, especially on ppc64el. I'm attempting to summarize the thread in
this bug report:
This test installs debian-edu metapackages, which in particular include
libnss-ldapd and polkitd. As far as I can see, there is no LDAP
configuration and no LDAP server provided: the nss(5) configuration
allows user and group name resolution via LDAP, but in practice it will
fail to resolve anything, and hopefully it should gracefully fail over
to looking up users and groups in the passwd(5) and group(5) flat files.
The symptom of the failure is that sometimes, polkitd.postinst will
successfully invoke systemd-sysusers to create the polkitd user and
group in passwd(5) and group(5):
> 173s Configurando polkitd (126-2) ...
> 173s Creating group 'polkitd' with GID 989.
> 173s Creating user 'polkitd' (User for polkitd) with UID 989 and GID 989.
but then immediately after that, an operation that involves looking up
the newly-created polkitd group will fail, instead of falling back to
group(5) as it should:
> 173s chown: invalid group: ‘root:polkitd’
> 173s dpkg: erro processando pacote polkitd (--configure):
> 173s o subprocesso instalado pacote polkitd script post-installation retornou estado de saída de erro 1
This is not specific to polkitd. Other postinsts also fail to look up a
newly-created user:
> 193s Configurando udev (257.6-1) ...
> 193s Creating group 'input' with GID 993.
> 193s Creating group 'sgx' with GID 992.
> 193s Creating group 'kvm' with GID 991.
> 193s Creating group 'render' with GID 990.
> 193s /usr/lib/tmpfiles.d/static-nodes-permissions.conf:18: Failed to resolve group 'kvm': No such process
> 193s /usr/lib/tmpfiles.d/static-nodes-permissions.conf:19: Failed to resolve group 'kvm': No such process
> 193s /usr/lib/tmpfiles.d/static-nodes-permissions.conf:20: Failed to resolve group 'kvm': No such process
> 194s systemd-udevd.service is a disabled or a static unit, not starting it.
The error message "No such process" indicates ESRCH, but that might be
an error synthesized internally by systemd utility code to represent
"the lookup failed" rather than specifically referring to a process not
being found.
For whatever reason, this seems to fail more often on ppc64el:
https://ci.debian.net/packages/d/debian-edu-config/testing/ppc64el/61391819/
https://ci.debian.net/packages/d/debian-edu-config/testing/ppc64el/61390539/
https://ci.debian.net/packages/d/debian-edu-config/testing/ppc64el/61390462/
https://ci.debian.net/packages/d/debian-edu-config/testing/ppc64el/61388736/
https://ci.debian.net/packages/d/debian-edu-config/testing/ppc64el/61387577/
https://ci.debian.net/packages/d/debian-edu-config/testing/ppc64el/61164352/
However, it has failed on amd64 and arm64 on at least one occasion each:
https://ci.debian.net/packages/d/debian-edu-config/testing/amd64/60137393/
https://ci.debian.net/packages/d/debian-edu-config/testing/arm64/61120346/
(search for "root:polkitd" to find the error)
I think this could point to a bug in either the libnss-ldapd package, or
the nslcd service that it depends on, or something about how debian-edu
configures these packages. I think it's unlikely to be a bug in polkitd
or systemd-sysusers.
smcv
Reply to: