Re: No ssh service after upgrade from trixie Sid to forky Sid
Hi,
the provident upgrade instructions mention my problem under
https://www.debian.org/releases/trixie/release-notes/upgrading.en.html#file-conflicts
But the proposed remedy
dpkg -r --force-depends package_name
does not help, because the package gnome-themes-extra-data is
stuck in limbo beyond what i can manage to achieve by Debian tools.
Brute force helped after i decided to root out gnome-themes-extra and
its helper gnome-themes-extra-data:
I removed the files
/var/lib/dpkg/info/gnome-themes-extra:amd64.list
/var/lib/dpkg/info/gnome-themes-extra:amd64.md5sums
In /var/lib/dpkg/status i removed the sections under
Package: gnome-themes-extra
and
Package: gnome-themes-extra-data
This enabled a long run of
apt --fix-broken install
which ended without error indication.
service ssh restart
still refused with the new error message
Sep 12 19:30:01 ts6-sid sshd[103708]: /etc/ssh/sshd_config line 91: Bad key types '+ssh-dss'.
So i commented out the line
PubkeyAcceptedKeyTypes +ssh-dss
and repeated
service ssh start
No complaints any more.
I can log in from the host with a third ssh session.
It is time to reboot ... yay ! Login still works \o/
Now i should sanitize
/etc/ssh/sshd_config
for the future upgrades.
/etc/apt/sources.list
needs to get back to "unstable" from trixie. Then again a dist-upgrade
to "forky" Sid and migration to the new sources format.
But first a backup of the disk image. :))
Long story:
=======================================================================
I follow the "file-conflicts" instructions and do:
-----------------------------------------------------------------------
# dpkg -r --force-depends gnome-themes-extra-data
dpkg: warning: ignoring request to remove gnome-themes-extra-data which isn't installed
# apt --fix-broken install
...
dpkg: error processing archive /var/cache/apt/archives/gnome-themes-extra-data_3.28-4_all.deb (--unpack):
trying to overwrite '/usr/share/themes/Adwaita/gtk-2.0/apps.rc', which is also in package gnome-themes-standard-data (3.22.3-1)
...
Error: Sub-process /usr/bin/dpkg returned an error code (1)
#
-----------------------------------------------------------------------
I am becomming impatient:
-----------------------------------------------------------------------
# rm /var/cache/apt/archives/gnome-themes-extra-data_3.28-4_all.deb
# apt --fix-broken install
...
Get:1 http://ftp.de.debian.org/debian trixie/main amd64 gnome-themes-extra-data all 3.28-4 [571 kB]
...
dpkg: error processing archive /var/cache/apt/archives/gnome-themes-extra-data_3.28-4_all.deb (--unpack):
trying to overwrite '/usr/share/themes/Adwaita/gtk-2.0/apps.rc', which is also in package gnome-themes-standard-data (3.22.3-1)
...
Error: Sub-process /usr/bin/dpkg returned an error code (1)
# rm /var/cache/apt/archives/gnome-themes-extra-data_3.28-4_all.deb
# apt --fix-broken --no-download install
...
Error: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
# apt --fix-broken --ignore-missing --no-download install
...
Error: Unable to correct problems, you have held broken packages.
# apt-mark showhold
#
# dpkg -r --force-depends gnome-themes-standard-data
dpkg: warning: ignoring request to remove gnome-themes-extra-data which isn't installed
#
-----------------------------------------------------------------------
Next i asked the internet. It gave me
https://www.baeldung.com/linux/dpkg-error-two-solution
In /var/lib/dpkg/status it looks like gnome-themes-extra-data is used
only by gnome-themes-extra which seems not needed by anything else.
So as proposed in above article i remove related files:
-----------------------------------------------------------------------
# mv /var/lib/dpkg/info/gnome-themes-extra:amd64.list /var/lib/dpkg/info/gnome-themes-extra:amd64.md5sums /tmp
-----------------------------------------------------------------------
and i remove in file /var/lib/dpkg/status the sections for
gnome-themes-extra and gnome-themes-extra-data:
-----------------------------------------------------------------------
Package: gnome-themes-extra
Status: install ok unpacked
Priority: optional
Section: gnome
Installed-Size: 534
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Architecture: amd64
Multi-Arch: same
Version: 3.28-4
Depends: gnome-themes-extra-data (>= 3.28-4), libc6 (>= 2.4), libcairo2 (>= 1.2.4), libglib2.0-0t64 (>= 2.38.0), gtk2-engines-pixbuf
Recommends: gnome-accessibility-themes, adwaita-icon-theme
Description: Adwaita GTK 2 theme — engine
This is the version of Adwaita, the standard GNOME theme, for the
GTK 2.x toolkit.
.
The GTK 3.x version is already included in libgtk-3-0.
.
This package contains the Adwaita theme engine.
Package: gnome-themes-extra-data
Status: deinstall ok not-installed
Priority: optional
Section: gnome
Architecture: all
Multi-Arch: foreign
-----------------------------------------------------------------------
Then once again
-----------------------------------------------------------------------
# apt --fix-broken install
...
... lots of "Setting up", "Installing new version of config file" ...
...
Setting up openssh-server (1:10.0p1-7) ...
Installing new version of config file /etc/pam.d/sshd ...
Installing new version of config file /etc/ssh/moduli ...
/etc/ssh/sshd_config line 16: Deprecated option UsePrivilegeSeparation
/etc/ssh/sshd_config line 19: Deprecated option KeyRegenerationInterval
/etc/ssh/sshd_config line 20: Deprecated option ServerKeyBits
/etc/ssh/sshd_config line 31: Deprecated option RSAAuthentication
/etc/ssh/sshd_config line 38: Deprecated option RhostsRSAAuthentication
/etc/ssh/sshd_config line 91: Bad key types '+ssh-dss'.
Finishing upgrade from pre-9.8 monolithic sshd ...
Removing 'diversion of /usr/sbin/sshd to /usr/sbin/sshd.session-split by openssh-client'
Could not execute systemctl: at /usr/bin/deb-systemd-invoke line 148.
ssh.socket is a disabled or a static unit not running, not starting it.
Created symlink '/etc/systemd/system/ssh.service.wants/sshd-keygen.service' → '/usr/lib/systemd/system/sshd-keygen.service'.
Created symlink '/etc/systemd/system/sshd.service.wants/sshd-keygen.service' → '/usr/lib/systemd/system/sshd-keygen.service'.
Created symlink '/etc/systemd/system/sshd@.service.wants/sshd-keygen.service' → '/usr/lib/systemd/system/sshd-keygen.service'.
Created symlink '/etc/systemd/system/ssh.socket.wants/sshd-keygen.service' → '/usr/lib/systemd/system/sshd-keygen.service'.
...
Processing triggers for libc-bin (2.41-12) ...
#
-----------------------------------------------------------------------
Still no ssh service.
-----------------------------------------------------------------------
# service ssh restart
Job for ssh.service failed because the control process exited with error code.
See "systemctl status ssh.service" and "journalctl -xeu ssh.service" for details.
# journalctl -xeu ssh.service
...
Sep 12 19:30:01 ts6-sid sshd[103708]: /etc/ssh/sshd_config line 16: Deprecated o
ption UsePrivilegeSeparation
Sep 12 19:30:01 ts6-sid sshd[103708]: /etc/ssh/sshd_config line 19: Deprecated o
ption KeyRegenerationInterval
Sep 12 19:30:01 ts6-sid sshd[103708]: /etc/ssh/sshd_config line 20: Deprecated o
ption ServerKeyBits
Sep 12 19:30:01 ts6-sid sshd[103708]: /etc/ssh/sshd_config line 31: Deprecated o
ption RSAAuthentication
Sep 12 19:30:01 ts6-sid sshd[103708]: /etc/ssh/sshd_config line 38: Deprecated o
ption RhostsRSAAuthentication
Sep 12 19:30:01 ts6-sid sshd[103708]: /etc/ssh/sshd_config line 91: Bad key type
s '+ssh-dss'.
Sep 12 19:30:01 ts6-sid systemd[1]: ssh.service: Control process exited, code=ex
...
-----------------------------------------------------------------------
A new problem with the new ssh server.
So i comment out in /etc/ssh/sshd_config the line with:
-----------------------------------------------------------------------
# To re-enable my SSH DSA key
# PubkeyAcceptedKeyTypes +ssh-dss
-----------------------------------------------------------------------
Holding my breath i do:
-----------------------------------------------------------------------
# service ssh start
-----------------------------------------------------------------------
And i can log in from the host machine
$ ssh -p 5557 thomas@localhost
-----------------------------------------------------------------------
# journalctl -xeu ssh.service
...
Sep 12 19:34:16 ts6-sid sshd-session[103738]: Accepted publickey for thomas from 10.0.2.2 port 41882 ssh2: RSA ...
Sep 12 19:34:16 ts6-sid sshd-session[103738]: pam_unix(sshd:session): session opened for user thomas(uid=...) by thomas(uid=...)
-----------------------------------------------------------------------
Have a nice day :)
Thomas
Reply to: