Hi,

Jean-Michel Vourgère <nir...@debian.org> writes:

> Package: needrestart
> Version: 2.11-3+deb9u1
> Severity: normal
>
> Dear Maintainer,
>
> Here, needrestart recently stopped working automatically in stable.

This is triggered by the bugfix for Debian Bug#876459 and is
intentional (upstream's point of view).


> I am using it with unattended-upgrades.
>
> After libssl upgrade this morning, unattended-upgrades-dpkg.log says things 
> like:
> systemctl restart nagios-nrpe-server.service

Did you change it's configuration? By default needrestart does query the
user before restarting any services for safety reasons. If it is run
non-interactive it should not restart services by design - as long you
did not change it's configuration to do so.

The behavior before 2.11-3+deb9u1 was a bug and has been fixed in
stretch's point release 9.4[1].

[1] https://www.debian.org/News/2018/20180310


BTW: needrestart 2.11 has a buggy detection(=croaks a lot of Perl
warnings) if it is run non-interactive (see also Debian Bug#859387). It
has been fixed in needrestart 3.0+ (which is available in bpo).


> But a ps show that the service has not been restarted for 2 weeks:
> nagios     880  0.0  0.1  23912  4084 ?        Ss   Mar13   1:08 /usr/sbin/
> nrpe -c /etc/nagios/nrpe.cfg -f

This is intentional - your log shows that needrestart does only list the
units which should be restarted.


> If I run needrestart manually, I am asked whether or not I want to restart 
> nagios-nrpe-server.service (cute curse interface). If I answer yes, the 
> services are properly restarted.
> nagios   21026  0.3  0.1  23912  4316 ?        Ss   12:10   0:00 /usr/sbin/
> nrpe -c /etc/nagios/nrpe.cfg -f
>
> I expected needrestart to automatically reload the services using obsolete 
> libssl, like it used to.

You could change the default mode to automaticly restart (that also
effects the interactive mode). (Hint: with needrestart 3.0 it is
possible to set the NEEDRESTART_MODE environment variable to override
needrestart's restart mode... might be used in the unattended-upgrade
cronjob).


HTH,
Thomas

-- 

    ::  WWW:                        https://fiasko-nw.net/~thomas/  ::
   :::  Jabber:                   xmpp:tho...@jabber.fiasko-nw.net  :::
    ::  flickr:             https://www.flickr.com/photos/laugufe/  ::

Reply via email to