[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#806406: 1.1 regression: apt-get hangs forever, due to missing "_apt" user



Package: apt
Version: 1.1
Severity: grave

Hello,

after dist-upgrading my sid schroot today, apt-get hangs forever. I
suspected some local schroot breakage, so I wiped it and tried to
rebuild one, but "mk-sbuild sid" hangs there too when it did the
initial bootstrap and runs "apt-get update" in the schroot. Killing
them, trying to chroot into the half-created env myself and running
with debugging gives the output below.

Dist-upgrading a jessie schroot to sid works on the other hand.

Michael figured out that this is because apt expects the "_apt" system
user. This isn't present in a fresh debootstrap, and also gets wiped
with schroot as that usually copies /etc/passwd and friends from the
host (which does not have the _apt user).

For a critical package like apt which is part of deboostrap it's
generally not a good idea to rely on a dynamic system user. Please try
to avoid the _apt user altogether -- it cannot be relied upon and also
looks a bit like clutter. If you want to run http with reduced
privileges, could you use an existing static user, like "sys" or
"daemon"?

Thanks!

Martin

apt-get update debug output:

$ sudo chroot /srv/schroot/sid-amd64/
(sid-amd64)root@donald:/# cat /etc/apt/apt.conf.d/
01autoremove          01autoremove-kernels  70debconf             
(sid-amd64)root@donald:/# apt-get update
0% [Working]^C
(sid-amd64)root@donald:/# apt-get update -o Debug::acquire::http=1 -o Debug::pkgAcquire::worker=1
Starting method '/usr/lib/apt/methods/http'
 <- http:100%20Capabilities%0aVersion:%201.2%0aPipeline:%20true%0aSend-Config:%20true
Configured access method http
Version:1.2 SingleInstance:0 Pipeline:1 SendConfig:1 LocalOnly: 0 NeedsCleanup: 0 Removable: 0
Starting method '/usr/lib/apt/methods/http'
 <- http:100%20Capabilities%0aVersion:%201.2%0aPipeline:%20true%0aSend-Config:%20true
Configured access method http
Version:1.2 SingleInstance:0 Pipeline:1 SendConfig:1 LocalOnly: 0 NeedsCleanup: 0 Removable: 0
 -> http:601%20Configuration%0aConfig-Item:%20APT::Architecture=amd64%0aConfig-Item:%20APT::Build-Essential::=build-essential%0aConfig-Item:%20APT::Install-Recommends=1%0aConfig-Item:%20APT::Install-Suggests=0%0aConfig-Item:%20APT::Sandbox::User=_apt%0aConfig-Item:%20APT::NeverAutoRemove::=^firmware-linux.*%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-firmware$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-headers-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-image-extra-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-signed-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^kfreebsd-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^kfreebsd-headers-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^gnumach-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^.*-modules-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^.*-kernel-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-backports-modules-.*-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-tools-4\.2\.0-19-generic$%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-image%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-headers%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-image-extra%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-signed-image%0aConfig-Item:%20APT::VersionedKernelPackages::=kfreebsd-image%0aConfig-Item:%20APT::VersionedKernelPackages::=kfreebsd-headers%0aConfig-Item:%20APT::VersionedKernelPackages::=gnumach-image%0aConfig-Item:%20APT::VersionedKernelPackages::=.*-modules%0aConfig-Item:%20APT::VersionedKernelPackages::=.*-kernel%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-backports-modules-.*%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-tools%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=contrib/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=non-free/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=restricted/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=universe/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=multiverse/metapackages%0aConfig-Item:%20APT::Move-Autobit-Sections::=oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=contrib/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=non-free/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=restricted/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=universe/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=multiverse/oldlibs%0aConfig-Item:%20APT::Color::Highlight=%251b[32m%0aConfig-Item:%20APT::Color::Neutral=%251b[0m%0aConfig-Item:%20APT::Color::Red=%251b[31m%0aConfig-Item:%20APT::Color::Green=%251b[32m%0aConfig-Item:%20APT::Color::Yellow=%251b[33m%0aConfig-Item:%20APT::Color::Blue=%251b[34m%0aConfig-Item:%20APT::Color::Magenta=%251b[35m%0aConfig-Item:%20APT::Color::Cyan=%251b[36m%0aConfig-Item:%20APT::Color::White=%251b[37m%0aConfig-Item:%20APT::Compressor::lzma::Binary=xz%0aConfig-Item:%20APT::Compressor::lzma::CompressArg::=--format%253dlzma%0aConfig-Item:%20APT::Compressor::lzma::CompressArg::=-9%0aConfig-Item:%20APT::Compressor::lzma::UncompressArg::=--format%253dlzma%0aConfig-Item:%20APT::Compressor::lzma::UncompressArg::=-d%0aConfig-Item:%20Dir=/%0aConfig-Item:%20Dir::State=var/lib/apt/%0aConfig-Item:%20Dir::State::lists=lists/%0aConfig-Item:%20Dir::State::cdroms=cdroms.list%0aConfig-Item:%20Dir::State::mirrors=mirrors/%0aConfig-Item:%20Dir::State::extended_states=extended_states%0aConfig-Item:%20Dir::State::status=/var/lib/dpkg/status%0aConfig-Item:%20Dir::Cache=var/cache/apt/%0aConfig-Item:%20Dir::Cache::archives=archives/%0aConfig-Item:%20Dir::Cache::srcpkgcache=srcpkgcache.bin%0aConfig-Item:%20Dir::Cache::pkgcache=pkgcache.bin%0aConfig-Item:%20Dir::Etc=etc/apt/%0aConfig-Item:%20Dir::Etc::sourcelist=sources.list%0aConfig-Item:%20Dir::Etc::sourceparts=sources.list.d%0aConfig-Item:%20Dir::Etc::main=apt.conf%0aConfig-Item:%20Dir::Etc::netrc=auth.conf%0aConfig-Item:%20Dir::Etc::parts=apt.conf.d%0aConfig-Item:%20Dir::Etc::preferences=preferences%0aConfig-Item:%20Dir::Etc::preferencesparts=preferences.d%0aConfig-Item:%20Dir::Etc::trusted=trusted.gpg%0aConfig-Item:%20Dir::Etc::trustedparts=trusted.gpg.d%0aConfig-Item:%20Dir::Bin::methods=/usr/lib/apt/methods%0aConfig-Item:%20Dir::Bin::solvers::=/usr/lib/apt/solvers%0aConfig-Item:%20Dir::Bin::dpkg=/usr/bin/dpkg%0aConfig-Item:%20Dir::Bin::bzip2=/bin/bzip2%0aConfig-Item:%20Dir::Bin::xz=/usr/bin/xz%0aConfig-Item:%20Dir::Bin::lzma=/usr/bin/xz%0aConfig-Item:%20Dir::Media::MountPath=/media/apt%0aConfig-Item:%20Dir::Log=var/log/apt%0aConfig-Item:%20Dir::Log::Terminal=term.log%0aConfig-Item:%20Dir::Log::History=history.log%0aConfig-Item:%20Dir::Ignore-Files-Silently::=~$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.disabled$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.bak$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.dpkg-[a-z]+$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.save$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.orig$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.distUpgrade$%0aConfig-Item:%20Acquire::AllowInsecureRepositories=1%0aConfig-Item:%20Acquire::AllowDowngradeToInsecureRepositories=0%0aConfig-Item:%20Acquire::cdrom::mount=/media/cdrom/%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::MetaKey=$(COMPONENT)/binary-$(ARCHITECTURE)/Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::flatMetaKey=Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::ShortDescription=Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::Description=$(RELEASE)/$(COMPONENT)%2520$(ARCHITECTURE)%2520Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::flatDescription=$(RELEASE)%2520Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::Optional=0%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::MetaKey=$(COMPONENT)/i18n/Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::flatMetaKey=$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::ShortDescription=Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::Description=$(RELEASE)/$(COMPONENT)%2520Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::flatDescription=$(RELEASE)%2520Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::MetaKey=$(COMPONENT)/source/Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::flatMetaKey=Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::ShortDescription=Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::Description=$(RELEASE)/$(COMPONENT)%2520Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::flatDescription=$(RELEASE)%2520Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::Optional=0%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Debian=http://metadata.ftp-master.debian.org/changelogs/CHANGEPATH_changelog%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Tanglu=http://metadata.tanglu.org/changelogs/CHANGEPATH_changelog%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Ubuntu=http://changelogs.ubuntu.com/changelogs/pool/CHANGEPATH/changelog%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Ultimedia=http://packages.ultimediaos.com/changelogs/pool/CHANGEPATH/changelog.txt%0aConfig-Item:%20Acquire::CompressionTypes::xz=xz%0aConfig-Item:%20Acquire::CompressionTypes::bz2=bzip2%0aConfig-Item:%20Acquire::CompressionTypes::lzma=lzma%0aConfig-Item:%20Acquire::CompressionTypes::gz=gzip%0aConfig-Item:%20DPkg::Pre-Install-Pkgs::=/usr/sbin/dpkg-preconfigure%2520--apt%2520||%2520true%0aConfig-Item:%20Binary=apt-get%0aConfig-Item:%20Debug::acquire::http=1%0aConfig-Item:%20Debug::pkgAcquire::worker=1%0aConfig-Item:%20CommandLine::AsString=apt-get%2520update%2520-o%2520Debug::acquire::http%253d1%2520-o%2520Debug::pkgAcquire::worker%253d1%0a%0a
 -> http:600%20URI%20Acquire%0aURI:%20http://httpredir.debian.org/debian/dists/sid/InRelease%0aFilename:%20/var/lib/apt/lists/partial/httpredir.debian.org_debian_dists_sid_InRelease%0aIndex-File:%20true%0aMaximum-Size:%2010000000%0aFail-Ignore:%20true%0a%0a
0% [Working] <- http:400%20URI%20Failure%0aURI:%20<UNKNOWN>%0aMessage:%20No%20user%20_apt,%20can%20not%20drop%20rights
0% [Working]


-- 
Martin Pitt                        | http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)

Attachment: signature.asc
Description: Digital signature


Reply to: