Your message dated Sat, 23 Nov 2024 01:19:20 +0000
with message-id <[email protected]>
and subject line Bug#1069162: fixed in puppetserver 8.7.0-2
has caused the Debian Bug report #1069162,
regarding Problem starting at boot, MAINPID to kill is a root-owned java process
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1069162: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1069162
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: puppetserver
Version: 7.9.5-2
Severity: normal

I found puppetserver failing to boot, because the `ExecStartPost` 
line fails:

```
[Service]
ExecStartPost=sh -c "while ! head -c1 ${RUNTIME_DIRECTORY}/restart | grep -q 
'^1'; do kill -0 $MAINPID && sleep 1 || exit 1; done"
```

Adding a little debugging output, I find `$MAINPID` pointing to the wrong
process, and the `kill` failing:

```
sh[653]: + ps -fp 652
sh[653]: UID          PID    PPID  C STIME TTY          TIME CMD
sh[653]: root         652       1  0 10:34 ?        00:00:00 (java)
sh[653]: + kill -0 652 Apr 17 10:18:27
sh[653]: sh: 1: kill: Operation not permitted
```

It's unclear to me why `$MAINPID` points at the root-owned `java` process, or
why that process is even started as root, given that `User=puppet` is
specified.

This only happens during boot, and not 100% of the time. When the service is
restarted later, it works fine.

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.6.13-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_NZ, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8), LANGUAGE=en_NZ:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages puppetserver depends on:
ii  default-jre-headless                         2:1.17-75
pn  jruby                                        <none>
pn  libclj-time-clojure                          <none>
pn  libclojure-java                              <none>
pn  libcomidi-clojure                            <none>
pn  libcommons-exec-java                         <none>
ii  libcommons-io-java                           2.16.0-1
pn  libcommons-lang-java                         <none>
pn  libdropwizard-metrics-java                   <none>
pn  libdujour-version-check-clojure              <none>
pn  libjruby-utils-clojure                       <none>
pn  libkitchensink-clojure                       <none>
pn  libliberator-clojure                         <none>
pn  libprismatic-schema-clojure                  <none>
pn  libpuppetlabs-http-client-clojure            <none>
pn  libpuppetlabs-i18n-clojure                   <none>
pn  libpuppetlabs-ring-middleware-clojure        <none>
pn  libraynes-fs-clojure                         <none>
pn  librbac-client-clojure                       <none>
pn  libsemver-clojure                            <none>
pn  libshell-utils-clojure                       <none>
pn  libslingshot-clojure                         <none>
pn  libssl-utils-clojure                         <none>
pn  libtrapperkeeper-authorization-clojure       <none>
pn  libtrapperkeeper-clojure                     <none>
pn  libtrapperkeeper-comidi-metrics-clojure      <none>
pn  libtrapperkeeper-filesystem-watcher-clojure  <none>
pn  libtrapperkeeper-metrics-clojure             <none>
pn  libtrapperkeeper-scheduler-clojure           <none>
pn  libtrapperkeeper-status-clojure              <none>
pn  libtrapperkeeper-webserver-jetty9-clojure    <none>
pn  libyaml-snake-java                           <none>
ii  procps                                       2:4.0.4-4
pn  puppet-agent                                 <none>
ii  ruby                                         1:3.1+nmu1
ii  ruby-concurrent                              1.2.3-2
pn  ruby-deep-merge                              <none>
pn  ruby-fast-gettext                            <none>
pn  ruby-gettext                                 <none>
pn  ruby-hocon                                   <none>
ii  ruby-locale                                  2.1.3-1
pn  ruby-puppet-resource-api                     <none>
pn  ruby-puppetserver-ca-cli                     <none>
pn  ruby-semantic-puppet                         <none>
pn  ruby-text                                    <none>

Versions of packages puppetserver recommends:
pn  puppet-module-puppetlabs-mailalias-core  <none>

puppetserver suggests no packages.


-- 
 .''`.   martin f. krafft <[email protected]>
: :'  :  proud Debian developer
`. `'`   http://people.debian.org/~madduck
  `-  Debian - when you have better things to do than fixing systems

--- End Message ---
--- Begin Message ---
Source: puppetserver
Source-Version: 8.7.0-2
Done: Jérôme Charaoui <[email protected]>

We believe that the bug you reported is fixed in the latest version of
puppetserver, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jérôme Charaoui <[email protected]> (supplier of updated puppetserver package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 22 Nov 2024 18:26:26 -0500
Source: puppetserver
Architecture: source
Version: 8.7.0-2
Distribution: unstable
Urgency: medium
Maintainer: Puppet Package Maintainers 
<[email protected]>
Changed-By: Jérôme Charaoui <[email protected]>
Closes: 1069162
Changes:
 puppetserver (8.7.0-2) unstable; urgency=medium
 .
   [ Anton Lundin ]
   * add a small delay in service unit's ExecStartPost (Closes: #1069162)
 .
   [ Jérôme Charaoui ]
   * silence cron job if package removed
   * d/rules: fix snakeyaml jar filename in classpath
Checksums-Sha1:
 da20d61ea87e5c13bc6e6f08e667f3eec56a45bb 3124 puppetserver_8.7.0-2.dsc
 85a622031cde55a89adbffe4e78d891dc400194b 26600 
puppetserver_8.7.0-2.debian.tar.xz
 96a48d568235121a8b97efde1e2b4fc37b9f1394 15605 
puppetserver_8.7.0-2_amd64.buildinfo
Checksums-Sha256:
 fe680fe81b64d2e119b3d64231aad58949c22c41e5a96a48e0df9005deeba70e 3124 
puppetserver_8.7.0-2.dsc
 bd2348caf39e08c3a7801df86593b0bd81d8c333d7114b33086c406d8f4509de 26600 
puppetserver_8.7.0-2.debian.tar.xz
 075a23fc207186e56a57a24bb48efd9ba60933e7471bd9a0070dc4461f4d6e98 15605 
puppetserver_8.7.0-2_amd64.buildinfo
Files:
 4133c28937dd17a8a8e9de2ea8b00ea5 3124 admin optional puppetserver_8.7.0-2.dsc
 b30e41d6e4e6dc748f8bb9ddaf89b812 26600 admin optional 
puppetserver_8.7.0-2.debian.tar.xz
 99dfb6789516dd81a4dc2bdc2d4b2633 15605 admin optional 
puppetserver_8.7.0-2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQTAq04Rv2xblqv/eu5pxS9ljpiFQgUCZ0Eo/gAKCRBpxS9ljpiF
QtpTAQD8BjhGu1RnXq4o0hs1uHqcAhACLgBaSfi1l/lDgVO9WQD+PyfC8zKSPF9L
VvctRNO49hNP4e24WfoWE36gBVf+pwI=
=F0Pu
-----END PGP SIGNATURE-----

Attachment: pgpOJAW3v6DjG.pgp
Description: PGP signature


--- End Message ---

Reply via email to