[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#806406: marked as done (1.1 regression: apt-get hangs forever, due to missing "_apt" user)

Your message dated Fri, 27 Nov 2015 15:34:32 +0000
with message-id <E1a2L2e-0006v4-Qv@franck.debian.org>
and subject line Bug#806406: fixed in apt 1.1.1
has caused the Debian Bug report #806406,
regarding 1.1 regression: apt-get hangs forever, due to missing "_apt" user
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
806406: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806406
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: apt
Version: 1.1
Severity: grave

Hello,

after dist-upgrading my sid schroot today, apt-get hangs forever. I
suspected some local schroot breakage, so I wiped it and tried to
rebuild one, but "mk-sbuild sid" hangs there too when it did the
initial bootstrap and runs "apt-get update" in the schroot. Killing
them, trying to chroot into the half-created env myself and running
with debugging gives the output below.

Dist-upgrading a jessie schroot to sid works on the other hand.

Michael figured out that this is because apt expects the "_apt" system
user. This isn't present in a fresh debootstrap, and also gets wiped
with schroot as that usually copies /etc/passwd and friends from the
host (which does not have the _apt user).

For a critical package like apt which is part of deboostrap it's
generally not a good idea to rely on a dynamic system user. Please try
to avoid the _apt user altogether -- it cannot be relied upon and also
looks a bit like clutter. If you want to run http with reduced
privileges, could you use an existing static user, like "sys" or
"daemon"?

Thanks!

Martin

apt-get update debug output:

$ sudo chroot /srv/schroot/sid-amd64/
(sid-amd64)root@donald:/# cat /etc/apt/apt.conf.d/
01autoremove          01autoremove-kernels  70debconf             
(sid-amd64)root@donald:/# apt-get update
0% [Working]^C
(sid-amd64)root@donald:/# apt-get update -o Debug::acquire::http=1 -o Debug::pkgAcquire::worker=1
Starting method '/usr/lib/apt/methods/http'
 <- http:100%20Capabilities%0aVersion:%201.2%0aPipeline:%20true%0aSend-Config:%20true
Configured access method http
Version:1.2 SingleInstance:0 Pipeline:1 SendConfig:1 LocalOnly: 0 NeedsCleanup: 0 Removable: 0
Starting method '/usr/lib/apt/methods/http'
 <- http:100%20Capabilities%0aVersion:%201.2%0aPipeline:%20true%0aSend-Config:%20true
Configured access method http
Version:1.2 SingleInstance:0 Pipeline:1 SendConfig:1 LocalOnly: 0 NeedsCleanup: 0 Removable: 0
 -> http:601%20Configuration%0aConfig-Item:%20APT::Architecture=amd64%0aConfig-Item:%20APT::Build-Essential::=build-essential%0aConfig-Item:%20APT::Install-Recommends=1%0aConfig-Item:%20APT::Install-Suggests=0%0aConfig-Item:%20APT::Sandbox::User=_apt%0aConfig-Item:%20APT::NeverAutoRemove::=^firmware-linux.*%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-firmware$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-headers-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-image-extra-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-signed-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^kfreebsd-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^kfreebsd-headers-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^gnumach-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^.*-modules-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^.*-kernel-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-backports-modules-.*-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-tools-4\.2\.0-19-generic$%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-image%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-headers%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-image-extra%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-signed-image%0aConfig-Item:%20APT::VersionedKernelPackages::=kfreebsd-image%0aConfig-Item:%20APT::VersionedKernelPackages::=kfreebsd-headers%0aConfig-Item:%20APT::VersionedKernelPackages::=gnumach-image%0aConfig-Item:%20APT::VersionedKernelPackages::=.*-modules%0aConfig-Item:%20APT::VersionedKernelPackages::=.*-kernel%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-backports-modules-.*%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-tools%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=contrib/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=non-free/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=restricted/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=universe/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=multiverse/metapackages%0aConfig-Item:%20APT::Move-Autobit-Sections::=oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=contrib/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=non-free/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=restricted/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=universe/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=multiverse/oldlibs%0aConfig-Item:%20APT::Color::Highlight=%251b[32m%0aConfig-Item:%20APT::Color::Neutral=%251b[0m%0aConfig-Item:%20APT::Color::Red=%251b[31m%0aConfig-Item:%20APT::Color::Green=%251b[32m%0aConfig-Item:%20APT::Color::Yellow=%251b[33m%0aConfig-Item:%20APT::Color::Blue=%251b[34m%0aConfig-Item:%20APT::Color::Magenta=%251b[35m%0aConfig-Item:%20APT::Color::Cyan=%251b[36m%0aConfig-Item:%20APT::Color::White=%251b[37m%0aConfig-Item:%20APT::Compressor::lzma::Binary=xz%0aConfig-Item:%20APT::Compressor::lzma::CompressArg::=--format%253dlzma%0aConfig-Item:%20APT::Compressor::lzma::CompressArg::=-9%0aConfig-Item:%20APT::Compressor::lzma::UncompressArg::=--format%253dlzma%0aConfig-Item:%20APT::Compressor::lzma::UncompressArg::=-d%0aConfig-Item:%20Dir=/%0aConfig-Item:%20Dir::State=var/lib/apt/%0aConfig-Item:%20Dir::State::lists=lists/%0aConfig-Item:%20Dir::State::cdroms=cdroms.list%0aConfig-Item:%20Dir::State::mirrors=mirrors/%0aConfig-Item:%20Dir::State::extended_states=extended_states%0aConfig-Item:%20Dir::State::status=/var/lib/dpkg/status%0aConfig-Item:%20Dir::Cache=var/cache/apt/%0aConfig-Item:%20Dir::Cache::archives=archives/%0aConfig-Item:%20Dir::Cache::srcpkgcache=srcpkgcache.bin%0aConfig-Item:%20Dir::Cache::pkgcache=pkgcache.bin%0aConfig-Item:%20Dir::Etc=etc/apt/%0aConfig-Item:%20Dir::Etc::sourcelist=sources.list%0aConfig-Item:%20Dir::Etc::sourceparts=sources.list.d%0aConfig-Item:%20Dir::Etc::main=apt.conf%0aConfig-Item:%20Dir::Etc::netrc=auth.conf%0aConfig-Item:%20Dir::Etc::parts=apt.conf.d%0aConfig-Item:%20Dir::Etc::preferences=preferences%0aConfig-Item:%20Dir::Etc::preferencesparts=preferences.d%0aConfig-Item:%20Dir::Etc::trusted=trusted.gpg%0aConfig-Item:%20Dir::Etc::trustedparts=trusted.gpg.d%0aConfig-Item:%20Dir::Bin::methods=/usr/lib/apt/methods%0aConfig-Item:%20Dir::Bin::solvers::=/usr/lib/apt/solvers%0aConfig-Item:%20Dir::Bin::dpkg=/usr/bin/dpkg%0aConfig-Item:%20Dir::Bin::bzip2=/bin/bzip2%0aConfig-Item:%20Dir::Bin::xz=/usr/bin/xz%0aConfig-Item:%20Dir::Bin::lzma=/usr/bin/xz%0aConfig-Item:%20Dir::Media::MountPath=/media/apt%0aConfig-Item:%20Dir::Log=var/log/apt%0aConfig-Item:%20Dir::Log::Terminal=term.log%0aConfig-Item:%20Dir::Log::History=history.log%0aConfig-Item:%20Dir::Ignore-Files-Silently::=~$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.disabled$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.bak$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.dpkg-[a-z]+$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.save$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.orig$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.distUpgrade$%0aConfig-Item:%20Acquire::AllowInsecureRepositories=1%0aConfig-Item:%20Acquire::AllowDowngradeToInsecureRepositories=0%0aConfig-Item:%20Acquire::cdrom::mount=/media/cdrom/%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::MetaKey=$(COMPONENT)/binary-$(ARCHITECTURE)/Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::flatMetaKey=Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::ShortDescription=Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::Description=$(RELEASE)/$(COMPONENT)%2520$(ARCHITECTURE)%2520Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::flatDescription=$(RELEASE)%2520Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::Optional=0%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::MetaKey=$(COMPONENT)/i18n/Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::flatMetaKey=$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::ShortDescription=Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::Description=$(RELEASE)/$(COMPONENT)%2520Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::flatDescription=$(RELEASE)%2520Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::MetaKey=$(COMPONENT)/source/Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::flatMetaKey=Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::ShortDescription=Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::Description=$(RELEASE)/$(COMPONENT)%2520Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::flatDescription=$(RELEASE)%2520Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::Optional=0%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Debian=http://metadata.ftp-master.debian.org/changelogs/CHANGEPATH_changelog%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Tanglu=http://metadata.tanglu.org/changelogs/CHANGEPATH_changelog%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Ubuntu=http://changelogs.ubuntu.com/changelogs/pool/CHANGEPATH/changelog%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Ultimedia=http://packages.ultimediaos.com/changelogs/pool/CHANGEPATH/changelog.txt%0aConfig-Item:%20Acquire::CompressionTypes::xz=xz%0aConfig-Item:%20Acquire::CompressionTypes::bz2=bzip2%0aConfig-Item:%20Acquire::CompressionTypes::lzma=lzma%0aConfig-Item:%20Acquire::CompressionTypes::gz=gzip%0aConfig-Item:%20DPkg::Pre-Install-Pkgs::=/usr/sbin/dpkg-preconfigure%2520--apt%2520||%2520true%0aConfig-Item:%20Binary=apt-get%0aConfig-Item:%20Debug::acquire::http=1%0aConfig-Item:%20Debug::pkgAcquire::worker=1%0aConfig-Item:%20CommandLine::AsString=apt-get%2520update%2520-o%2520Debug::acquire::http%253d1%2520-o%2520Debug::pkgAcquire::worker%253d1%0a%0a
 -> http:600%20URI%20Acquire%0aURI:%20http://httpredir.debian.org/debian/dists/sid/InRelease%0aFilename:%20/var/lib/apt/lists/partial/httpredir.debian.org_debian_dists_sid_InRelease%0aIndex-File:%20true%0aMaximum-Size:%2010000000%0aFail-Ignore:%20true%0a%0a
0% [Working] <- http:400%20URI%20Failure%0aURI:%20<UNKNOWN>%0aMessage:%20No%20user%20_apt,%20can%20not%20drop%20rights
0% [Working]


-- 
Martin Pitt                        | http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)

Attachment: signature.asc
Description: Digital signature


--- End Message ---
--- Begin Message --- 
Source: apt
Source-Version: 1.1.1

We believe that the bug you reported is fixed in the latest version of
apt, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 806406@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Vogt <mvo@debian.org> (supplier of updated apt package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 27 Nov 2015 16:04:59 +0100
Source: apt
Binary: apt libapt-pkg5.0 libapt-inst2.0 apt-doc libapt-pkg-dev libapt-pkg-doc apt-utils apt-transport-https
Architecture: source all amd64
Version: 1.1.1
Distribution: unstable
Urgency: medium
Maintainer: APT Development Team <deity@lists.debian.org>
Changed-By: Michael Vogt <mvo@debian.org>
Description:
 apt        - commandline package manager
 apt-doc    - documentation for APT
 apt-transport-https - https download transport for APT
 apt-utils  - package management related utility programs
 libapt-inst2.0 - deb package format runtime library
 libapt-pkg-dev - development files for APT's libapt-pkg and libapt-inst
 libapt-pkg-doc - documentation for APT development
 libapt-pkg5.0 - package management runtime library
Closes: 806406 806422
Changes:
 apt (1.1.1) unstable; urgency=medium
 .
   [ Michael Vogt ]
   * Deal with killed acquire methods properly instead of hanging
     (Closes: #806406)
   * Check if the Apt::Sandbox::User exists in CheckDropPrivsMustBeDisabled()
     (Closes: #806406)
 .
   [ David Kalnischkies ]
   * appease adequate with some weak symbols for -private (Closes: #806422)
Checksums-Sha1:
 321e5ab45ae8f4633faa0fe7d60c2dfed06cbda3 2315 apt_1.1.1.dsc
 409d179e6e150ec3c1454dc1eaf55cad971e0e1c 1990092 apt_1.1.1.tar.xz
 ff2cc36e8c97913253647f56823df84202332155 335662 apt-doc_1.1.1_all.deb
 6d8667a97e14cd0e07e444248f4df3285da67354 145692 apt-transport-https_1.1.1_amd64.deb
 9ed9093f12d705b2edcb96c4f5a4ef8bc176a1ee 380022 apt-utils_1.1.1_amd64.deb
 ab1445f8ed8ed51c9462eae35a4cc1402b0a1685 1083278 apt_1.1.1_amd64.deb
 51bac09a311105c6b7d417f684c687f024f2e68c 175886 libapt-inst2.0_1.1.1_amd64.deb
 65f987ba283ac0b54ebff904b3735c4873419278 214664 libapt-pkg-dev_1.1.1_amd64.deb
 5025e411ea460da4c1657ef0ef0e84d3699bc0ad 979908 libapt-pkg-doc_1.1.1_all.deb
 1421da106df9444ec045e16a0285a3d1fdaad385 790274 libapt-pkg5.0_1.1.1_amd64.deb
Checksums-Sha256:
 7cfefecb6a18e49ce0f4a17272ed1eff983d42e94290282da8867dabf8ac37e3 2315 apt_1.1.1.dsc
 a63d0b1aabdba7a9b038525c0e399f08cd6bc7d5a35143c45bcc8780f01cf546 1990092 apt_1.1.1.tar.xz
 e3bd34b2b9cd381d87abc392e032fcd251df0d62f95a786ceadfa5f74a47ee29 335662 apt-doc_1.1.1_all.deb
 bb5badd4835cafe1a475c87dd99a9d201d6b00c6e0c1b583ea379438c9cd615b 145692 apt-transport-https_1.1.1_amd64.deb
 e386758356997269a19be9702661db7ae2fc7439fd4d332ddb0f926f19f7128e 380022 apt-utils_1.1.1_amd64.deb
 661c1ab6a25cd7a2306cd58b67bdd3f819de62d04de2babeb122bf9b618b6fcc 1083278 apt_1.1.1_amd64.deb
 412f903c64141ed7d180bc2bb9d51531d606e86669811ec7c132cddd0f616986 175886 libapt-inst2.0_1.1.1_amd64.deb
 f4b8d16d0b3f89d7608d33ac41337d30db4bbcc9df0cfda98a0239f14d86784f 214664 libapt-pkg-dev_1.1.1_amd64.deb
 c0326956b4da76c6614e589672a17591a093a504493326cedebc0a1aa48a7493 979908 libapt-pkg-doc_1.1.1_all.deb
 13dedbc452813f63924408fc3249224681a6e3dfde97b64cff3fc01a04d8c1b7 790274 libapt-pkg5.0_1.1.1_amd64.deb
Files:
 9d5f92b9d904d1343f463631042cc552 2315 admin important apt_1.1.1.dsc
 5f3ddfc45aeb75e61e5152568b68c6c9 1990092 admin important apt_1.1.1.tar.xz
 72278b06916889e9d1c3929c2dbc2c66 335662 doc optional apt-doc_1.1.1_all.deb
 ba610b6814d97f92dd4b145cba5be73d 145692 admin optional apt-transport-https_1.1.1_amd64.deb
 e1d4c30453e9a5b8ec89dabb317d876b 380022 admin important apt-utils_1.1.1_amd64.deb
 02340d317ed9dd5ea7a78e4a3f9d4ef3 1083278 admin important apt_1.1.1_amd64.deb
 e184ea3ed83c496820e450b9c28ebce9 175886 libs important libapt-inst2.0_1.1.1_amd64.deb
 7380064ffb657ba72b2ba43e7d7389c0 214664 libdevel optional libapt-pkg-dev_1.1.1_amd64.deb
 0d33eafdb43b89a2865c7e41d02272ea 979908 doc optional libapt-pkg-doc_1.1.1_all.deb
 68c9339c5dfae56bd229a84c869afbbe 790274 libs important libapt-pkg5.0_1.1.1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=g0ej
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: