Control: reassign -1 etckeeper On Fri, Nov 03, 2017 at 08:48:51PM +0100, Thomas Renard wrote: > Package: apt > Version: 1.6~alpha3 > Severity: normal > > Dear Maintainer, > > > etckeeper cannot update repository anymore. > > * apt upgrade > > Expected > > * all files are upgraded > * etckeeper does git stuff. > > Actual behavior > > * all files are upgraded > > output like this: > > ... (some more files with no permissions)# > xdg/autostart/xdg-user-dirs.desktop: Keine Berechtigung > xdg/autostart/xembedsniproxy.desktop: Keine Berechtigung > xdg/autostart/zeitgeist-datahub.desktop: Keine Berechtigung > fatal: Konnte '/etc/.git/index.lock' nicht erstellen: Das Dateisystem ist nur > lesbar > warning: etckeeper failed to commit changes in /etc using git > > (sorry for the german output - this is something like "permission denied" for > the files > and /etc/.git/index.lock could not be created: read only file system) > > /etc/.git is in /, > > /dev/mapper/flynne-root on / type btrfs > (rw,noatime,compress=lzo,ssd,space_cache,subvolid=4965,subvol=/@) > > so filesystem is rw. > > ls -ld /etc/.git > > drwx------ 1 root root 144 Nov 1 19:34 /etc/.git > > probably it worked with apt 1.5 neither - Upgrade with ansible for some > weeks without an output of the warnings... > > Because 1.6~alpha3 has seccomp I expect that there may be some > jailing/sandboxing mechanism that could deny etckeeper working?? Does 1.5 > also have jailing > (via namespaces)? Behavior looks like it would be if you jail an > application with firejail and forgot directories to set rw. And no, apt > is not symbol linked to firejail ;-)
No sorry, apt's sandboxing is exclusive to the processes downloading files (and the decompression of them), that is stuff in /var/cache/apt/archives and /var/lib/apt/lists. Reassigning to etckeeper, but might also be a btrfs issue. > > etckeeper version: > > etckeeper: > Installiert: 1.18.5-1 > Installationskandidat: 1.18.5-1 > Versionstabelle: > *** 1.18.5-1 990 > 990 http://http.debian.net/debian testing/main amd64 Packages > 990 http://http.debian.net/debian testing/main i386 Packages > 500 http://http.debian.net/debian unstable/main amd64 Packages > 500 http://http.debian.net/debian unstable/main i386 Packages > 100 /var/lib/dpkg/status -- Debian Developer - deb.li/jak | jak-linux.org - free software dev Ubuntu Core Developer de, en speaker