Bug#880687: apt: etckeeper does not work with apt anymore
Control: reassign -1 etckeeper
On Fri, Nov 03, 2017 at 08:48:51PM +0100, Thomas Renard wrote:
> Package: apt
> Version: 1.6~alpha3
> Severity: normal
>
> Dear Maintainer,
>
>
> etckeeper cannot update repository anymore.
>
> * apt upgrade
>
> Expected
>
> * all files are upgraded
> * etckeeper does git stuff.
>
> Actual behavior
>
> * all files are upgraded
>
> output like this:
>
> ... (some more files with no permissions)#
> xdg/autostart/xdg-user-dirs.desktop: Keine Berechtigung
> xdg/autostart/xembedsniproxy.desktop: Keine Berechtigung
> xdg/autostart/zeitgeist-datahub.desktop: Keine Berechtigung
> fatal: Konnte '/etc/.git/index.lock' nicht erstellen: Das Dateisystem ist nur lesbar
> warning: etckeeper failed to commit changes in /etc using git
>
> (sorry for the german output - this is something like "permission denied" for the files
> and /etc/.git/index.lock could not be created: read only file system)
>
> /etc/.git is in /,
>
> /dev/mapper/flynne-root on / type btrfs (rw,noatime,compress=lzo,ssd,space_cache,subvolid=4965,subvol=/@)
>
> so filesystem is rw.
>
> ls -ld /etc/.git
>
> drwx------ 1 root root 144 Nov 1 19:34 /etc/.git
>
> probably it worked with apt 1.5 neither - Upgrade with ansible for some
> weeks without an output of the warnings...
>
> Because 1.6~alpha3 has seccomp I expect that there may be some
> jailing/sandboxing mechanism that could deny etckeeper working?? Does 1.5 also have jailing
> (via namespaces)? Behavior looks like it would be if you jail an
> application with firejail and forgot directories to set rw. And no, apt
> is not symbol linked to firejail ;-)
No sorry, apt's sandboxing is exclusive to the processes downloading files (and the
decompression of them), that is stuff in /var/cache/apt/archives and /var/lib/apt/lists.
Reassigning to etckeeper, but might also be a btrfs issue.
>
> etckeeper version:
>
> etckeeper:
> Installiert: 1.18.5-1
> Installationskandidat: 1.18.5-1
> Versionstabelle:
> *** 1.18.5-1 990
> 990 http://http.debian.net/debian testing/main amd64 Packages
> 990 http://http.debian.net/debian testing/main i386 Packages
> 500 http://http.debian.net/debian unstable/main amd64 Packages
> 500 http://http.debian.net/debian unstable/main i386 Packages
> 100 /var/lib/dpkg/status
--
Debian Developer - deb.li/jak | jak-linux.org - free software dev
Ubuntu Core Developer de, en speaker
Reply to: