[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#757822: openssh-server: systemd start-limit reached after bootup, causing sshd to be stopped



Package: openssh-server
Version: 1:6.6p1-6
Severity: important

On a fresh install of Jessie with systemd and networkmanager in a VM with 3 interfaces, the if-up.d/openssh-server script restarts sshd with every network interface that comes up at boottime.

When these interfaces come up very quickly, this is triggers the default start-limit in systemd, causing sshd to be terminated and the machine in question to become unreachable over ssh.

I am able to reproduce this behaviour with 2 ethernet (1 dhcp and 1 static) and 1 tun (openvpn) interface.

Log excerpt:

Aug 11 14:53:20 vagrant systemd[1]: Starting OpenBSD Secure Shell server...
-- Unit ssh.service has begun starting up.
Aug 11 14:53:20 vagrant systemd[1]: Started OpenBSD Secure Shell server.
-- Unit ssh.service has finished starting up.
Aug 11 14:53:20 vagrant sshd[471]: Server listening on 0.0.0.0 port 22.
Aug 11 14:53:20 vagrant sshd[471]: Server listening on :: port 22.
Aug 11 14:53:20 vagrant NetworkManager[475]: <info> (eth1): device state change: secondaries -> activated (reason 'none') [90 100 0]
Aug 11 14:53:20 vagrant NetworkManager[475]: <info> Activation (eth1) successful, device activated.
Aug 11 14:53:20 vagrant NetworkManager[475]: <info> (eth0): device state change: secondaries -> activated (reason 'none') [90 100 0]
Aug 11 14:53:20 vagrant NetworkManager[475]: <info> Activation (eth0) successful, device activated.
Aug 11 14:53:20 vagrant systemd[1]: Stopping OpenBSD Secure Shell server...
-- Unit ssh.service has begun shutting down.
Aug 11 14:53:20 vagrant systemd[1]: Starting OpenBSD Secure Shell server...
-- Unit ssh.service has begun starting up.
Aug 11 14:53:20 vagrant systemd[1]: Started OpenBSD Secure Shell server.
-- Unit ssh.service has finished starting up.
Aug 11 14:53:20 vagrant sshd[471]: Received signal 15; terminating.
Aug 11 14:53:20 vagrant sshd[989]: Server listening on 0.0.0.0 port 22.
Aug 11 14:53:20 vagrant sshd[989]: Server listening on :: port 22.
Aug 11 14:53:21 vagrant systemd[1]: Stopping OpenBSD Secure Shell server...
-- Unit ssh.service has begun shutting down.
Aug 11 14:53:21 vagrant sshd[989]: Received signal 15; terminating.
Aug 11 14:53:21 vagrant systemd[1]: Starting OpenBSD Secure Shell server...
-- Unit ssh.service has begun starting up.
Aug 11 14:53:21 vagrant systemd[1]: Started OpenBSD Secure Shell server.
-- Unit ssh.service has finished starting up.
Aug 11 14:53:21 vagrant sshd[1059]: Server listening on 0.0.0.0 port 22.
Aug 11 14:53:21 vagrant sshd[1059]: Server listening on :: port 22.
Aug 11 14:53:21 vagrant systemd[1]: Stopping OpenBSD Secure Shell server...
-- Unit ssh.service has begun shutting down.
Aug 11 14:53:21 vagrant sshd[1059]: Received signal 15; terminating.
Aug 11 14:53:21 vagrant systemd[1]: Starting OpenBSD Secure Shell server...
-- Unit ssh.service has begun starting up.
Aug 11 14:53:21 vagrant systemd[1]: Started OpenBSD Secure Shell server.
-- Unit ssh.service has finished starting up.
Aug 11 14:53:21 vagrant sshd[1127]: Server listening on 0.0.0.0 port 22.
Aug 11 14:53:21 vagrant sshd[1127]: Server listening on :: port 22.
Aug 11 14:53:22 vagrant ifup[269]: bound to 10.0.2.15 -- renewal in 35227 seconds.
Aug 11 14:53:22 vagrant systemd[1]: Stopping OpenBSD Secure Shell server...
-- Unit ssh.service has begun shutting down.
Aug 11 14:53:22 vagrant sshd[1127]: Received signal 15; terminating.
Aug 11 14:53:22 vagrant systemd[1]: Starting OpenBSD Secure Shell server...
-- Unit ssh.service has begun starting up.
Aug 11 14:53:22 vagrant systemd[1]: Started OpenBSD Secure Shell server.
-- Unit ssh.service has finished starting up.
Aug 11 14:53:22 vagrant sshd[1290]: Server listening on 0.0.0.0 port 22.
Aug 11 14:53:22 vagrant sshd[1290]: Server listening on :: port 22.
Aug 11 14:53:25 vagrant NetworkManager[475]: <info> (tun0): device state change: secondaries -> activated (reason 'none') [90 100 0]
Aug 11 14:53:25 vagrant NetworkManager[475]: <info> Activation (tun0) successful, device activated.
Aug 11 14:53:25 vagrant systemd[1]: Stopping OpenBSD Secure Shell server...
-- Unit ssh.service has begun shutting down.
Aug 11 14:53:25 vagrant sshd[1290]: Received signal 15; terminating.
Aug 11 14:53:25 vagrant systemd[1]: Starting OpenBSD Secure Shell server...
-- Unit ssh.service has begun starting up.
Aug 11 14:53:25 vagrant systemd[1]: ssh.service start request repeated too quickly, refusing to start.
Aug 11 14:53:25 vagrant systemd[1]: Failed to start OpenBSD Secure Shell server.
-- Unit ssh.service has failed.
Aug 11 14:53:25 vagrant systemd[1]: Unit ssh.service entered failed state.


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openssh-server depends on:
ii  adduser                3.113+nmu3
ii  debconf [debconf-2.0]  1.5.53
ii  dpkg                   1.17.10
ii  init-system-helpers    1.20
ii  libc6                  2.19-7
ii  libcomerr2             1.42.11-2
ii  libgssapi-krb5-2       1.12.1+dfsg-7
ii  libkrb5-3              1.12.1+dfsg-7
ii  libpam-modules         1.1.8-3
ii  libpam-runtime         1.1.8-3
ii  libpam0g               1.1.8-3
ii  libselinux1            2.3-1
ii  libssl1.0.0            1.0.1i-1
ii  libwrap0               7.6.q-25
ii  lsb-base               4.1+Debian13
ii  openssh-client         1:6.6p1-6
ii  openssh-sftp-server    1:6.6p1-6
ii  procps                 1:3.3.9-7
ii  zlib1g                 1:1.2.8.dfsg-1

Versions of packages openssh-server recommends:
ii  ncurses-term  5.9+20140712-2
ii  xauth         1:1.0.9-1

Versions of packages openssh-server suggests:
pn  molly-guard   <none>
pn  monkeysphere  <none>
pn  rssh          <none>
pn  ssh-askpass   <none>
pn  ufw           <none>

-- debconf information:
  openssh-server/permit-root-login: false


Reply to: