Troubles with updating Debian Hurd
Hello.
Lately I've been having ever-increasing troubles trying to update my Debian
GNU/Hurd installation. I'm not entirely sure if it's my system that's
broken, or something's wrong with upstream Debian repositories (the latter
appears to be more likely, though). Either way, the issues seem to be
unrelated to the Hurd itself, and rather specific to Debian. And I'm not
proficient in these things enough to figure it out myself.
The issue with sudo
===================
To start off, I cannot use su or sudo to raise privileges:
$ su
su: Authentication failure
$ sudo echo hi
Sorry, try again.
Sorry, try again.
sudo: 3 incorrect password attempts
Neither actually ever asks me for a password. Sudo's own troubleshooting
FAQ has the following [0]:
> Q) Sudo never gives me a chance to enter a password using PAM, it just
> says 'Sorry, try again.' three times and exits.
> A) You didn't setup PAM to work with sudo. On RedHat Linux or Fedora
> Core this generally means installing the sample pam.conf file as
> /etc/pam.d/sudo. See the example pam.conf file for hints on what to use
> for other Linux systems.
[0]: https://www.sudo.ws/troubleshooting.html
I have definitely not messed with PAM on this system (at least, not
intentionally). Both su and sudo used to work before some recent update,
and I've verified that I see the same behavior on darnassus, so this does
look like an upstream issue with what Debian ships.
I can still log in as root directly, which gets me to the next issue:
The issue with apt update
=========================
Here are the relevant parts of my /etc/apt/sources.list:
deb [trusted=yes]
http://snapshot.debian.org/archive/debian-ports/20210812T100000Z/ sid
main
deb-src http://snapshot.debian.org/archive/debian/20210812T100000Z/ sid main
deb [trusted=yes]
https://snapshot.debian.org/archive/debian-ports/20210812T100000Z/
unreleased main
deb http://ftp.ports.debian.org/debian-ports unstable main
deb http://ftp.ports.debian.org/debian-ports experimental main
deb http://ftp.ports.debian.org/debian-ports unreleased main
deb http://deb.debian.org/debian-ports unstable main
deb-src http://deb.debian.org/debian unstable main
deb http://deb.debian.org/debian-ports experimental main
deb-src http://deb.debian.org/debian experimental main
deb http://deb.debian.org/debian-ports unreleased main
deb-src http://deb.debian.org/debian unreleased main
deb http://ftp.ports.debian.org/debian-ports unstable-debug main
deb http://ftp.ports.debian.org/debian-ports experimental-debug main
I'm unable to install debian-ports-archive-keyring, hence trusted=yes. And
I admit to not really understanding how this works: the above snippet was
mostly assembled using the "try things till it works" approach (except it
doesn't work anymore). In particular, some of the entries I've scraped from
this doc [1].
[1]: https://www.debian.org/ports/hurd/hurd-install
This is what I see when I run apt update:
# apt update
Get:1 http://deb.debian.org/debian-ports unstable InRelease [55.3 kB]
Hit:2 http://snapshot.debian.org/archive/debian-ports/20210812T100000Z
sid InRelease
Hit:3 http://ftp.ports.debian.org/debian-ports experimental InRelease
Hit:4 http://deb.debian.org/debian unstable InRelease
Hit:5 http://snapshot.debian.org/archive/debian/20210812T100000Z sid
InRelease
Hit:6 http://ftp.ports.debian.org/debian-ports unreleased InRelease
Get:7 http://deb.debian.org/debian-ports experimental InRelease [55.3
kB]
Ign:8 http://ftp.ports.debian.org/debian-ports unstable-debug
InRelease
Ign:9 http://ftp.ports.debian.org/debian-ports experimental-debug
InRelease
Hit:10 http://deb.debian.org/debian experimental InRelease
Get:11 http://ftp.ports.debian.org/debian-ports unstable InRelease [55.3 kB]
Get:12 http://deb.debian.org/debian-ports unreleased InRelease [56.6 kB]
Get:13 https://snapshot.debian.org/archive/debian-ports/20210812T100000Z
unreleased InRelease [56.6 kB]
Ign:14 http://deb.debian.org/debian unreleased InRelease
Err:15 http://ftp.ports.debian.org/debian-ports unstable-debug Release
404 Not Found [IP: 130.89.148.77 80]
Err:16 http://deb.debian.org/debian unreleased Release
404 Not Found [IP: 151.101.86.132 80]
Err:17 http://ftp.ports.debian.org/debian-ports experimental-debug Release
404 Not Found [IP: 130.89.148.77 80]
Get:18 http://deb.debian.org/debian-ports unstable/main hurd-i386
Packages [18.9 MB]
Err:6 http://ftp.ports.debian.org/debian-ports unreleased InRelease
The following signatures were invalid: BADSIG 5A88D659DCB811BB
Debian Ports Archive Automatic Signing Key (2021)
<ftpmaster@ports-master.debian.org>
Get:19 https://snapshot.debian.org/archive/debian-ports/20210812T100000Z
unreleased/main hurd-i386 Packages [188 kB]
Get:20 http://deb.debian.org/debian-ports unstable/main all Packages [9,323 kB]
Get:21 http://deb.debian.org/debian-ports experimental/main hurd-i386
Packages [795 kB]
Get:22 http://deb.debian.org/debian-ports experimental/main all
Packages [464 kB]
Get:23 http://deb.debian.org/debian-ports unreleased/main hurd-i386
Packages [159 kB]
Get:24 http://ftp.ports.debian.org/debian-ports unstable/main
hurd-i386 Packages [18.9 MB]
Err:18 http://deb.debian.org/debian-ports unstable/main hurd-i386
Packages
Hash Sum mismatch
Hashes of expected file:
- Filesize:77531148 [weak]
- SHA512:c8108d738ef08afa9556ec395e0b8097e54f66347cce924303b6294dcfa32a4a3853b29597902372562542c7b73ca364be44234d3c0b709e992ad19fa6b566a2
- SHA256:06de0c824e0ff3e683a5698ebd63892c34f264eff7d311a7e3a225dd894f8457
- SHA1:4b881bd3628a18f0917b55349563fe6a95f25887 [weak]
- MD5Sum:65d941cde7d7279bbecfe22c67ff40fa [weak]
Hashes of received file:
- SHA512:9fae8af5d37a72f3410c9c0c70d75c4677b9ee8933bd3a05c8cb20e59430f7b56fb060b6d0cba41a20ac0e7d878cd447a6936b740ffc3536b74afe0fd31d90bb
- SHA256:06de0c824e0ff3e683a5698ebd63892c34f264eff7d311a7e3a225dd894f8457
- SHA1:4b881bd3628a18f0917b55349563fe6a95f25887 [weak]
- MD5Sum:65d941cde7d7279bbecfe22c67ff40fa [weak]
- Filesize:77531148 [weak]
Last modification reported: Thu, 30 Sep 2021 07:23:09 +0000
Release file created at: Thu, 30 Sep 2021 07:40:38 +0000
Err:19 https://snapshot.debian.org/archive/debian-ports/20210812T100000Z
unreleased/main hurd-i386 Packages
Hash Sum mismatch
Hashes of expected file:
- Filesize:755398 [weak]
- SHA512:830bbee3f0a649701c3a5b55871d4936c4cc45fdd666e6800264e5c365f65af11af1489b5155e87f12d172923c1f7671b6bda3060a452ea3459f3229cabf1eba
- SHA256:9a24ed717113ab571a5e5b4d0c260856f3fcd79a9a04bd667da9e8b4ae768b40
- SHA1:43aec500d242311ea4f7392fda5d6dd78b458437 [weak]
- MD5Sum:a0d2abb78827691baaa96835c45711f3 [weak]
Hashes of received file:
- SHA512:513653e475542d5652a419480700336b476f110e7dfbf438982f1d7361b231818c069fdd4fb970a47c08330234dc182c2cc9c5f9f8de13fe94be092086e5b9c2
- SHA256:9a24ed717113ab571a5e5b4d0c260856f3fcd79a9a04bd667da9e8b4ae768b40
- SHA1:43aec500d242311ea4f7392fda5d6dd78b458437 [weak]
- MD5Sum:a0d2abb78827691baaa96835c45711f3 [weak]
- Filesize:755398 [weak]
Last modification reported: Wed, 11 Aug 2021 02:01:50 +0000
Release file created at: Thu, 12 Aug 2021 07:29:40 +0000
Err:21 http://deb.debian.org/debian-ports experimental/main hurd-i386
Packages
Hash Sum mismatch
Hashes of expected file:
- Filesize:3675782 [weak]
- SHA512:cbc3ef2bba3c0e5d24bad319160d81437d9622458de2a805f966005127e3125a72e3dec069ca0c8caa3037e6665ecfe7e572dd2bdf2a678d9e4e0a9add347347
- SHA256:c906ca5c09b7fb98508962c595bbcc9174da517521cc2d2c5d6f0e91abecb534
- SHA1:0b0cb5e5042a82a00064ce8c1f9d454ff53c1822 [weak]
- MD5Sum:342c054c5ff9b8129e35f45cbd6b9c06 [weak]
Hashes of received file:
- SHA512:02e05e3a74aa854ff28401a4cb971cfca4e63016390c68b1fec9a8c3b2ed43526cebfed598d694b8fb48f196d85aac1176e791eb1fbeab797a41fd3ca5d2ea3e
- SHA256:c906ca5c09b7fb98508962c595bbcc9174da517521cc2d2c5d6f0e91abecb534
- SHA1:0b0cb5e5042a82a00064ce8c1f9d454ff53c1822 [weak]
- MD5Sum:342c054c5ff9b8129e35f45cbd6b9c06 [weak]
- Filesize:3675782 [weak]
Last modification reported: Thu, 30 Sep 2021 07:39:43 +0000
Release file created at: Thu, 30 Sep 2021 07:41:07 +0000
Err:22 http://deb.debian.org/debian-ports experimental/main all
Packages
Err:23 http://deb.debian.org/debian-ports unreleased/main hurd-i386
Packages
Hash Sum mismatch
Hashes of expected file:
- Filesize:659166 [weak]
- SHA512:52a7aab50f21dc02224b53fbd63db25f283ce5270e7c8cfdd8145a406c12fa69321c0fa03fdc2b647ad8c27d9c911f72890841fb6fdfa420a49cd8ad13bbec6f
- SHA256:1725ce5414bdef5adabd725caca33af1253ffa0405122c2c3715c39e500648a5
- SHA1:8767c794a044244d6baa35c3dbe4f3697221da07 [weak]
- MD5Sum:2820433296bbc691ac90b281bf9216d2 [weak]
Hashes of received file:
- SHA512:2f9f9e5a1dfbae4ad624ead36e53f29192e0cc89d90d5f659ac330989560b2e6b822de820c54349c3a2d2e90d3d524ac902f6cadffa6ce888a6211979fd95553
- SHA256:1725ce5414bdef5adabd725caca33af1253ffa0405122c2c3715c39e500648a5
- SHA1:8767c794a044244d6baa35c3dbe4f3697221da07 [weak]
- MD5Sum:2820433296bbc691ac90b281bf9216d2 [weak]
- Filesize:659166 [weak]
Last modification reported: Tue, 28 Sep 2021 06:10:47 +0000
Release file created at: Thu, 30 Sep 2021 07:41:06 +0000
Get:25 http://ftp.ports.debian.org/debian-ports unstable/main all
Packages [9,323 kB]
Reading package lists... Done
E: The repository 'http://ftp.ports.debian.org/debian-ports
unstable-debug Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is
therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user
configuration details.
E: The repository 'http://deb.debian.org/debian unreleased Release'
does not have a Release file.
N: Updating from such a repository can't be done securely, and is
therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user
configuration details.
E: The repository 'http://ftp.ports.debian.org/debian-ports
experimental-debug Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is
therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user
configuration details.
W: An error occurred during the signature verification. The repository
is not updated and the previous index files will be used. GPG error:
http://ftp.ports.debian.org/debian-ports unreleased InRelease: The
following signatures were invalid: BADSIG 5A88D659DCB811BB Debian
Ports Archive Automatic Signing Key (2021)
<ftpmaster@ports-master.debian.org>
I'm primarily concerned about the hashsum check failures. In all of the
cases, filesize, md5, sha1, and sha256 seem to match, but sha512 differs
between expected and received. I can't really imagine how this could be
possible unless sha512 was just computed incorrectly either remotely or
locally.
I've searched for similar issues online, and the one advice people give is:
/var/lib/apt/lists/partial/ must be corrupted, run apt clean (or: just wipe
/var/lib/apt/lists/partial/) and try again. I've tried both methods of
cleaning, and neither helped.
It's worth stressing that this issue is also (somewhat) new; apt used to
work flawlessly before on this same system.
The issue with debootstrap, part 1
==================================
To check if the previous issue is my system being in a messed up state, I've
tried to bootstrap a subhurd, to check if everything would work cleanly
there. Again, I've successfully used debootstrap to create subhurds on
this same system before.
The Hurd wiki page on subhurds [2] suggests the following command:
debootstrap sid mnt/ http://httpredir.debian.org/debian
[2]: https://www.gnu.org/software/hurd/hurd/subhurd.html
which doesn't work (seemingly because hurd-i386 is gone from
httpredir.debian.org), so I adapted it to:
# debootstrap --no-check-gpg sid /mnt/subhurd/
http://snapshot.debian.org/archive/debian-ports/20210812T100000Z/
(When I had debian-ports-archive-keyring installed, I've used something like
--keyring=/usr/share/keyrings/debian-ports-archive-keyring.gpg instead of
--no-check-gpg, to actually verify the packages being downloaded.)
This starts downloading packages, and then errors out at:
I: Retrieving libgcc-s1 10.2.1-6
I: Validating libgcc-s1 10.2.1-6
W: Retrying failed download of
http://snapshot.debian.org/archive/debian-ports/20210812T100000Z/pool-hurd-i386/main/g/gcc-10/libgcc-s1_10.2.1-6_hurd-i386.deb
W: http://snapshot.debian.org/archive/debian-ports/20210812T100000Z/pool-hurd-i386/main/g/gcc-10/libgcc-s1_10.2.1-6_hurd-i386.deb
was corrupt
W: Couldn't download package libgcc-s1 (ver 10.2.1-6 arch hurd-i386)
at http://snapshot.debian.org/archive/debian-ports/20210812T100000Z/pool-hurd-i386/main/g/gcc-10/libgcc-s1_10.2.1-6_hurd-i386.deb
then later the same thing for libstdc++6; the rest of the packages get
downloaded successfully and pass the validation.
That surely looks like something's broken about the repos, and not in my
system!
The issue with debootstrap, part 2
==================================
If I attempt to use the latest packages instead of the 20210812 snapshot, namely
# debootstrap --no-check-gpg sid /mnt/subhurd/
http://deb.debian.org/debian-ports
I get a different error. It succeeds at downloading and verifying
packages, and errors out at:
I: Configuring libc-bin...
W: Failure while configuring base packages. This will be re-attempted
up to five times.
W: See /mnt/subhurd/debootstrap/debootstrap.log for details (possibly
the package rsyslog is at fault)
The log contains the following:
Processing triggers for libc-bin (2.32-4) ...
Errors were encountered while processing:
rsyslog
dpkg: dependency problems prevent configuration of rsyslog:
rsyslog depends on libjson-c3 (>= 0.10); however:
Package libjson-c3 is not installed.
rsyslog depends on liblogging-stdlog0 (>= 1.0.2); however:
Package liblogging-stdlog0 is not installed.
rsyslog depends on liblognorm2 (>= 1.1.2); however:
Package liblognorm2 is not installed.
dpkg: error processing package rsyslog (--configure):
dependency problems - leaving unconfigured
Errors were encountered while processing:
rsyslog
dpkg: dependency problems prevent configuration of rsyslog:
rsyslog depends on libjson-c3 (>= 0.10); however:
Package libjson-c3 is not installed.
rsyslog depends on liblogging-stdlog0 (>= 1.0.2); however:
Package liblogging-stdlog0 is not installed.
rsyslog depends on liblognorm2 (>= 1.1.2); however:
Package liblognorm2 is not installed.
And that, again, seems to be an issue with the repos rather than with my
system.
Could somebody more Debian-proficient please take a look? Am I doing things
horribly wrong? Can you reproduce this on your systems?
Anyone?
Sergey
Reply to: