[Bug 920324] Re: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions)
OMG! Service with a :) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/920324 Title: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/920324/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 920324] Re: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions)
Eh? Speak up boy, no one's listening to this old bug report, sonny. From: John Center john.cen...@villanova.edu To: kstai...@yahoo.com Sent: Friday, March 16, 2012 2:58 PM Subject: [Bug 920324] Re: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions) I just installed this package it appears mdmon is missing. -John -- You received this bug notification because you are subscribed to the bug report. https://bugs.launchpad.net/bugs/920324 Title: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions) Status in “mdadm” package in Ubuntu: Fix Released Status in “mdadm” package in Debian: Fix Released Bug description: Looking at the list of fixes upgrading mdadm from 3.2.2 to 3.2.3 shows some severe regressions were fixed. mdadm: re-add fails (regression in mdadm-3.2.2-1ubuntu1) http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651880 mdadm: segmentation fault when converting raid10 to raid0 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645563 mdadm-raid does not assemble mds on multipath devices http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641584 This ticket was originally about only one of them: /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641886 Reproducing: 1. Install Ubuntu 12.04 with md raid. My system has: $ cat /proc/mdstat Personalities : [raid1] [linear] [multipath] [raid0] [raid6] [raid5] [raid4] [raid10] md1 : active raid1 sdb2[1] sda2[0] 522048 blocks [2/2] [UU] md0 : active raid1 sdb1[1] sda1[0] 10490304 blocks [2/2] [UU] md2 : active raid1 sdc1[0] sdd1[1] 805305143 blocks super 1.2 [2/2] [UU] unused devices: none 2. Try running this mdadm command, observe unexpected results: # mdadm --monitor --scan --oneshot mdadm: Only one autorebuild process allowed in scan mode, aborting 3. Also cron will send mail: /etc/cron.daily/mdadm: mdadm: Only one autorebuild process allowed in scan mode, aborting run-parts: /etc/cron.daily/mdadm exited with return code 1 Because when you install the mdadm package this crontab file is created: $ dpkg -S /etc/cron.daily/mdadm mdadm: /etc/cron.daily/mdadm 4. Stop any mdadm processes (but only for testing, it is unacceptable to turn off mdadm monitoring.) # service mdadm stop 5. Try running, observe expected results: # mdadm --monitor --scan --oneshot (no output) This issue was fixed in Debian, please Debian Import this version: Format: 1.8 Date: Wed, 18 Jan 2012 22:33:01 +0400 Source: mdadm Binary: mdadm mdadm-udeb Architecture: source i386 Version: 3.2.3-2 Distribution: unstable Urgency: low Maintainer: Debian mdadm maintainers pkg-mdadm-de...@lists.alioth.debian.org Changed-By: Michael Tokarev m...@tls.msk.ru Description: mdadm - tool to administer Linux MD arrays (software RAID) mdadm-udeb - tool to administer Linux MD arrays (software RAID) (udeb) Closes: 607375 628667 633880 637068 641584 641886 641972 645563 650630 651737 651880 652547 655212 Changes: mdadm (3.2.3-2) unstable; urgency=low . [ Michael Tokarev ] * new upstream bugfix/stable version, with lots of fixes all over. Closes: #641886, #628667, #645563, #651880, #607375, #633880 * update Neil's email (Closes: #650630) * update mdadd.sh to version 1.52 (Closes: #655212) * fixed a typo (RAID6 vs RAID10) in FAQ (Closes: #637068) * declare ordering dependency for multipath-tools-boot in mdadm-raid init script (Closes: #641584) While at it, remove mention of devfsd * added Slovak (sk.po) po-debconf translation from Slavko li...@slavino.sk (Closes: #641972) * set nice value of the check/resync thread too, together with I/O scheduling class, based on patch by Sergey B Kirpichev (Closes: #652547) * small changes for debian/checkarray * (internal) move files from contrib/* topgit branches into debian directory * remove dh_testroot from clean target * add myself to uploaders . [ Peter Eisentraut ] * Added support for status action to mdadm init script (Closes: #651737) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/920324/+subscriptions -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/920324 Title: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/920324/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 920324] Re: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions)
** Bug watch added: Debian Bug tracker #651880 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651880 ** Bug watch added: Debian Bug tracker #645563 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645563 ** Bug watch added: Debian Bug tracker #641584 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641584 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/920324 Title: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/920324/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
The DEP-5 specification v1.0 was released on Monday February 22, 2012 as part of debian-policy_3.9.3.0_all.deb -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
DEP-5: Patches pushed to the Debian Policy repository http://lists.debian.org/debian-policy/2012/02/msg00078.html -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 931806] Re: linux-lts-backport-natty: 2.6.38-13.56~lucid1 -proposed tracker
uname -srvm Linux 2.6.38-13-server #56~lucid1-Ubuntu SMP Tue Feb 14 03:35:38 UTC 2012 x86_64 apt-cache policy linux-image-2.6.38-13-server linux-image-2.6.38-13-server: Installed: 2.6.38-13.56~lucid1 Candidate: 2.6.38-13.56~lucid1 Version table: *** 2.6.38-13.56~lucid1 0 400 http://archive.ubuntu.com/ubuntu/ lucid-proposed/main Packages 100 /var/lib/dpkg/status 2.6.38-13.54~lucid1 0 900 http://packages/ubuntu-updates/ lucid-updates/main Packages 990 http://packages/ubuntu-security/ lucid-security/main Packages Also tested -generic -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/931806 Title: linux-lts-backport-natty: 2.6.38-13.56~lucid1 -proposed tracker To manage notifications about this bug go to: https://bugs.launchpad.net/kernel-sru-workflow/+bug/931806/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
Let me see if I understand. The reason this bug is not going to be fixed is: * Only some of the software distributed by Debian and Canonical under the GNU General Public License Version 2 includes a clause that says you can use future versions of that license AND * Some of the libraries have converted to future versions of that license (e.g. GNU General Public License Version 3.) AND * In particular gmp-5.0.2+dfsg (libgmp10) is licensed under LGPLv3 while it is unproven if all of the software that links against it is compatible with that license AND * There is no automated system for tracking software license dependencies AND * Such a system is not available due to lack of reliably-machine-readable software license data AND * A project known as DEP-5 ( http://dep.debian.net/deps/dep5/ ) exists to provide (develop) reliably-machine-readable software license data AND * If DEP-5 were completed all it would provide is detailed knowledge about software license interactions so that the areas which need work could be identified. Please correct me if any of the above in this comment is not correct. Thank you. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
ubuntu-treblig: go to https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350 and search for: Colin Watson: Needs Information on 2012-02-11 then explain just how that information will be provided. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
ubuntu-treblig: when you can answer my question then I will be able to answer yours. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
I'm beginning to suspect that the best answer is to not ask any more questions. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 934650] Re: oneconf-query crashed with ImportError in /usr/lib/python2.7/dist-packages/oneconf/packagesethandler.py: No module named distributor
*** This bug is a duplicate of bug 934624 *** https://bugs.launchpad.net/bugs/934624 ** Attachment added: xdpyinfo.txt https://bugs.launchpad.net/bugs/934650/+attachment/2751000/+files/xdpyinfo.txt ** Visibility changed to: Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/934650 Title: oneconf-query crashed with ImportError in /usr/lib/python2.7/dist- packages/oneconf/packagesethandler.py: No module named distributor To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/oneconf/+bug/934650/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 932889] Re: Missing build dependency for libvirt-bin: libgcrypt11-dev
@serge-hallyn Thanks for opening the Debian bug report. I was going to do it when I got back to where I have a Debian VM that can send SMTP. Also the reason I use gnutls with nettle not libgcrypt is stated in LP: #926350 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/932889 Title: Missing build dependency for libvirt-bin: libgcrypt11-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/932889/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 931806] Re: linux-lts-backport-natty: 2.6.38-13.56~lucid1 -proposed tracker
I made a copy of linux-lts-backport-natty: 2.6.38-13.56~lucid1 into
https://launchpad.net/~nutznboltz/+archive/lp-931806-testing
and installed that on a KVM server.
by default now:
net.bridge.bridge-nf-call-iptables = 1
VM guest is firewalled off, can only reach the VM host.
If I run:
$ sudo sysctl -w net.bridge.bridge-nf-call-iptables=0
net.bridge.bridge-nf-call-iptables = 0
Then the VM guest can access the network.
This is the same behavior I see on Ubuntu 12.04 (developer branch).
I don't remember seeing this on a 2.6.38 backport to Lucid before.
During 12.04 testing I had to add this:
case node[:lsb][:codename]
when 'precise'
# Ubuntu 12.04 iptables FORWARD section will control the
bridge (bridging) by default.
# Without the following adjustment VM guests' network
will not be reachable
# beyond the VM host when the FORWARD policy is set to
DROP or REJECT.
# Adjust firewall immediately
execute /sbin/sysctl -w
'net.bridge.bridge-nf-call-iptables=0' do
only_if { File.exists?('/proc/sys/net/bridge') }
end
# Also at boot time
execute echo 'net.bridge.bridge-nf-call-iptables=0'
/etc/sysctl.conf do
only_if do
File.exists?('/proc/sys/net/bridge') \
File.open(/etc/sysctl.conf).grep(/^net.bridge.bridge-nf-call-iptables=0/).empty?
end
end
end
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/931806
Title:
linux-lts-backport-natty: 2.6.38-13.56~lucid1 -proposed tracker
To manage notifications about this bug go to:
https://bugs.launchpad.net/kernel-sru-workflow/+bug/931806/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 931806] Re: linux-lts-backport-natty: 2.6.38-13.56~lucid1 -proposed tracker
Turns out that this is not an issue. The behavior is the same as the previous kernel. What I was missing is that custom firewall rules I did not know about were added to the servers. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/931806 Title: linux-lts-backport-natty: 2.6.38-13.56~lucid1 -proposed tracker To manage notifications about this bug go to: https://bugs.launchpad.net/kernel-sru-workflow/+bug/931806/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 932889] [NEW] Missing build dependency for libvirt-bin: libgcrypt11-dev
Public bug reported: The libvirt-bin (libvirt) package will not compile until the libgcrypt11-dev package is installed but running apt-get build-dep libvirt-bin does not install the libgcrypt11-dev package because the libvirt package debian/control file does not include it as a build dependency. Reproducing: 1. Install Ubuntu 12.04 2. apt-get source libvirt-bin 3. apt-get build-dep libvirt-bin 4. apt-get install devscripts 5. cd libvirt-0.9.8 6. debuild -i -uc -us -b Unexpected results: libvirt-0.9.8/./src/libvirt.c:22:20: fatal error: gcrypt.h: No such file or directory ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: libvirt-bin (not installed) ProcVersionSignature: Ubuntu 3.2.0-16.25-generic-pae 3.2.6 Uname: Linux 3.2.0-16-generic-pae i686 ApportVersion: 1.91-0ubuntu1 Architecture: i386 Date: Wed Feb 15 11:49:18 2012 InstallationMedia: Ubuntu 12.04 LTS Precise Pangolin - Alpha i386 (20120201.2) ProcEnviron: PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: libvirt UpgradeStatus: No upgrade log present (probably fresh install) ** Affects: libvirt (Ubuntu) Importance: Undecided Status: New ** Tags: apport-bug i386 precise testcase ** Tags added: testcase -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/932889 Title: Missing build dependency for libvirt-bin: libgcrypt11-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/932889/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 932889] Re: Missing build dependency for libvirt-bin: libgcrypt11-dev
The reason I know this is I am running gnutls26 with libnettle4. Thanks for fixing it here too. ** Description changed: The libvirt-bin (libvirt) package will not compile until the libgcrypt11-dev package is installed but running apt-get build-dep libvirt-bin does not install the libgcrypt11-dev package because the libvirt package debian/control file does not include it as a build dependency. Reproducing: 1. Install Ubuntu 12.04 2. apt-get source libvirt-bin 3. apt-get build-dep libvirt-bin 4. apt-get install devscripts 5. cd libvirt-0.9.8 6. debuild -i -uc -us -b Unexpected results: libvirt-0.9.8/./src/libvirt.c:22:20: fatal error: gcrypt.h: No such file or directory + 7. apt-get install libgcrypt11-dev + 8. debuild -i -uc -us -b + + works. + ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: libvirt-bin (not installed) ProcVersionSignature: Ubuntu 3.2.0-16.25-generic-pae 3.2.6 Uname: Linux 3.2.0-16-generic-pae i686 ApportVersion: 1.91-0ubuntu1 Architecture: i386 Date: Wed Feb 15 11:49:18 2012 InstallationMedia: Ubuntu 12.04 LTS Precise Pangolin - Alpha i386 (20120201.2) ProcEnviron: PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: libvirt UpgradeStatus: No upgrade log present (probably fresh install) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/932889 Title: Missing build dependency for libvirt-bin: libgcrypt11-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/932889/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
Added regression-release tag based on advice in https://wiki.ubuntu.com/QATeam/RegressionTracking ** Tags added: regression-update ** Tags removed: regression-update ** Tags added: regression-release -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
** Description changed: + == Regression details == + Discovered in version: 12.04 LTS + Last known good version: depends. 9.04 Jaunty the last one before a work-around became necessary. 11.10 was the last one that worked when you used the work-around. + If your account is an LDAP one and your LDAP client connects to its LDAP server via SSL then running setuid programs from your account fail since libgcrypt11 is horribly broken and upstream GnuTLS no longer recommends using it as the backend crypto library: http://lists.debian.org/debian-legal/2011/02/msg6.html In the past it was possible to work around this by using nscd but that work around no longer has any effect. When I rebuild gnutls26 with nettle I am able to use setuid binaries from my LDAP account which connects via SSL to its LDAP server. Reproducing: 1. Install an OpenLDAP server that speaks LDAP over SSL, see https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html for details. 2. Install Ubuntu 12.04 and configure it to be an LDAP client that connects via to its LDAP server via SSL. 3. Log into the Ubuntu 12.04 created in step using an LDAP account not an account in /etc/passwd. 4. Attempt to use sudo. You will see unexpected results: nutz@dubnium:~$ sudo id [sudo] password for nutz: sudo: setresuid(ROOT_UID, ROOT_UID, ROOT_UID): Operation not permitted sudo: unable to open /var/lib/sudo/nutz/1: Operation not permitted sudo: unable to set gid to runas gid 0: Operation not permitted sudo: unable to execute /usr/bin/id: Operation not permitted nutz@dubnium:~$ 5. Apply patched version of gnutls26, see attached branch. 6. Attempt to use sudo. You will see expected results: nutz@dubnium:~$ sudo id [sudo] password for nutz: uid=0(root) gid=0(root) groups=0(root) ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: libgnutls26 2.12.14-5ubuntu2 ProcVersionSignature: Ubuntu 3.2.0-12.21-generic 3.2.2 Uname: Linux 3.2.0-12-generic i686 ApportVersion: 1.91-0ubuntu1 Architecture: i386 Date: Fri Feb 3 16:22:47 2012 InstallationMedia: Ubuntu 11.10 Oneiric Ocelot - Release i386 (20111011) ProcEnviron: PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: gnutls26 UpgradeStatus: No upgrade log present (probably fresh install) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
** Description changed: == Regression details == - Discovered in version: 12.04 LTS - Last known good version: depends. 9.04 Jaunty the last one before a work-around became necessary. 11.10 was the last one that worked when you used the work-around. + Discovered in version: 2.12.14-5ubuntu2 (Ubuntu 12.04 LTS) + Last known good version: 2.10.5-1ubuntu3 (Ubuntu 11.10) + + Note that a work-around was required by libgnutls26 2.10.5-1ubuntu3 and + that work-around started to be required by an earlier version and stopped + helping when 2.12.14-5ubuntu2 is used. If your account is an LDAP one and your LDAP client connects to its LDAP server via SSL then running setuid programs from your account fail since libgcrypt11 is horribly broken and upstream GnuTLS no longer recommends using it as the backend crypto library: http://lists.debian.org/debian-legal/2011/02/msg6.html In the past it was possible to work around this by using nscd but that work around no longer has any effect. When I rebuild gnutls26 with nettle I am able to use setuid binaries from my LDAP account which connects via SSL to its LDAP server. Reproducing: 1. Install an OpenLDAP server that speaks LDAP over SSL, see https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html for details. 2. Install Ubuntu 12.04 and configure it to be an LDAP client that connects via to its LDAP server via SSL. 3. Log into the Ubuntu 12.04 created in step using an LDAP account not an account in /etc/passwd. 4. Attempt to use sudo. You will see unexpected results: nutz@dubnium:~$ sudo id [sudo] password for nutz: sudo: setresuid(ROOT_UID, ROOT_UID, ROOT_UID): Operation not permitted sudo: unable to open /var/lib/sudo/nutz/1: Operation not permitted sudo: unable to set gid to runas gid 0: Operation not permitted sudo: unable to execute /usr/bin/id: Operation not permitted nutz@dubnium:~$ 5. Apply patched version of gnutls26, see attached branch. 6. Attempt to use sudo. You will see expected results: nutz@dubnium:~$ sudo id [sudo] password for nutz: uid=0(root) gid=0(root) groups=0(root) ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: libgnutls26 2.12.14-5ubuntu2 ProcVersionSignature: Ubuntu 3.2.0-12.21-generic 3.2.2 Uname: Linux 3.2.0-12-generic i686 ApportVersion: 1.91-0ubuntu1 Architecture: i386 Date: Fri Feb 3 16:22:47 2012 InstallationMedia: Ubuntu 11.10 Oneiric Ocelot - Release i386 (20111011) ProcEnviron: PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: gnutls26 UpgradeStatus: No upgrade log present (probably fresh install) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 920324] Re: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions)
Successful reboot of a second system, this one has ext2 /boot on RAID-1 md0 and LVM on RAID-0 md1 $ cat /proc/mdstat Personalities : [raid0] [raid1] md1 : active raid0 sda2[0] sdb2[1] 1953130496 blocks super 1.2 512k chunks md0 : active raid1 sda1[0] sdb1[1] 194548 blocks super 1.2 [2/2] [UU] [3.260937] mdadm: sending ioctl 800c0910 to a partition! [3.260990] mdadm: sending ioctl 800c0910 to a partition! [3.261055] mdadm: sending ioctl 1261 to a partition! [3.261107] mdadm: sending ioctl 1261 to a partition! [3.261720] mdadm: sending ioctl 800c0910 to a partition! [3.261766] mdadm: sending ioctl 800c0910 to a partition! [3.266310] md: md0 stopped. [3.293294] md: bindsdb1 [3.293532] md: bindsda1 [3.294449] bio: create slab bio-1 at 1 [3.294569] md/raid1:md0: active with 2 out of 2 mirrors [3.294628] md0: detected capacity change from 0 to 199217152 [3.295273] md0: unknown partition table [3.299025] md: md1 stopped. [3.304593] md: bindsdb2 [3.304810] md: bindsda2 [3.305961] md/raid0:md1: md_size is 3906260992 sectors. [3.306014] md: RAID0 configuration for md1 - 1 zone [3.306067] md: zone0=[sda2/sdb2] [3.306232] zone-offset= 0KB, device-offset= 0KB, size=1953130496KB [3.306300] [3.306356] md1: detected capacity change from 0 to 205627904 [3.334425] md1: unknown partition table -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/920324 Title: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/920324/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 920324] Re: Please sync mdadm 3.2.3-2 from Debian unstable (main) (was: /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running)
** Description changed: Reproducing: 1. Install Ubuntu 12.04 with md raid. My system has: $ cat /proc/mdstat Personalities : [raid1] [linear] [multipath] [raid0] [raid6] [raid5] [raid4] [raid10] md1 : active raid1 sdb2[1] sda2[0] 522048 blocks [2/2] [UU] md0 : active raid1 sdb1[1] sda1[0] 10490304 blocks [2/2] [UU] md2 : active raid1 sdc1[0] sdd1[1] 805305143 blocks super 1.2 [2/2] [UU] unused devices: none 2. Try running this mdadm command, observe unexpected results: # mdadm --monitor --scan --oneshot mdadm: Only one autorebuild process allowed in scan mode, aborting 3. Also cron will send mail: /etc/cron.daily/mdadm: mdadm: Only one autorebuild process allowed in scan mode, aborting run-parts: /etc/cron.daily/mdadm exited with return code 1 + + Because when you install the mdadm package this crontab file is created: + + $ dpkg -S /etc/cron.daily/mdadm + mdadm: /etc/cron.daily/mdadm 4. Stop any mdadm processes (but only for testing, it is unacceptable to turn off mdadm monitoring.) # service mdadm stop 5. Try running, observe expected results: # mdadm --monitor --scan --oneshot (no output) This issue was fixed in Debian, please Debian Import this version: Format: 1.8 Date: Wed, 18 Jan 2012 22:33:01 +0400 Source: mdadm Binary: mdadm mdadm-udeb Architecture: source i386 Version: 3.2.3-2 Distribution: unstable Urgency: low Maintainer: Debian mdadm maintainers pkg-mdadm-de...@lists.alioth.debian.org Changed-By: Michael Tokarev m...@tls.msk.ru Description: mdadm - tool to administer Linux MD arrays (software RAID) mdadm-udeb - tool to administer Linux MD arrays (software RAID) (udeb) Closes: 607375 628667 633880 637068 641584 641886 641972 645563 650630 651737 651880 652547 655212 Changes: mdadm (3.2.3-2) unstable; urgency=low . [ Michael Tokarev ] * new upstream bugfix/stable version, with lots of fixes all over. Closes: #641886, #628667, #645563, #651880, #607375, #633880 * update Neil's email (Closes: #650630) * update mdadd.sh to version 1.52 (Closes: #655212) * fixed a typo (RAID6 vs RAID10) in FAQ (Closes: #637068) * declare ordering dependency for multipath-tools-boot in mdadm-raid init script (Closes: #641584) While at it, remove mention of devfsd * added Slovak (sk.po) po-debconf translation from Slavko li...@slavino.sk (Closes: #641972) * set nice value of the check/resync thread too, together with I/O scheduling class, based on patch by Sergey B Kirpichev (Closes: #652547) * small changes for debian/checkarray * (internal) move files from contrib/* topgit branches into debian directory * remove dh_testroot from clean target * add myself to uploaders . [ Peter Eisentraut ] * Added support for status action to mdadm init script (Closes: #651737) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/920324 Title: Please sync mdadm 3.2.3-2 from Debian unstable (main) (was: /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/920324/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 920324] Re: Please sync mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions)
** Summary changed: - Please sync mdadm 3.2.3-2 from Debian unstable (main) (was: /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running) + Please sync mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions) ** Description changed: + Looking at the list of fixes upgrading mdadm from 3.2.2 to 3.2.3 shows + some severe regressions were fixed. + + mdadm: re-add fails (regression in mdadm-3.2.2-1ubuntu1) + http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651880 + + mdadm: segmentation fault when converting raid10 to raid0 + http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645563 + + mdadm-raid does not assemble mds on multipath devices + http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641584 + + This ticket was originally about only one of them: + + /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running + http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641886 + Reproducing: 1. Install Ubuntu 12.04 with md raid. My system has: $ cat /proc/mdstat Personalities : [raid1] [linear] [multipath] [raid0] [raid6] [raid5] [raid4] [raid10] md1 : active raid1 sdb2[1] sda2[0] 522048 blocks [2/2] [UU] md0 : active raid1 sdb1[1] sda1[0] 10490304 blocks [2/2] [UU] md2 : active raid1 sdc1[0] sdd1[1] 805305143 blocks super 1.2 [2/2] [UU] unused devices: none 2. Try running this mdadm command, observe unexpected results: # mdadm --monitor --scan --oneshot mdadm: Only one autorebuild process allowed in scan mode, aborting 3. Also cron will send mail: /etc/cron.daily/mdadm: mdadm: Only one autorebuild process allowed in scan mode, aborting run-parts: /etc/cron.daily/mdadm exited with return code 1 Because when you install the mdadm package this crontab file is created: - $ dpkg -S /etc/cron.daily/mdadm + $ dpkg -S /etc/cron.daily/mdadm mdadm: /etc/cron.daily/mdadm 4. Stop any mdadm processes (but only for testing, it is unacceptable to turn off mdadm monitoring.) # service mdadm stop 5. Try running, observe expected results: # mdadm --monitor --scan --oneshot (no output) This issue was fixed in Debian, please Debian Import this version: Format: 1.8 Date: Wed, 18 Jan 2012 22:33:01 +0400 Source: mdadm Binary: mdadm mdadm-udeb Architecture: source i386 Version: 3.2.3-2 Distribution: unstable Urgency: low Maintainer: Debian mdadm maintainers pkg-mdadm-de...@lists.alioth.debian.org Changed-By: Michael Tokarev m...@tls.msk.ru Description: mdadm - tool to administer Linux MD arrays (software RAID) mdadm-udeb - tool to administer Linux MD arrays (software RAID) (udeb) Closes: 607375 628667 633880 637068 641584 641886 641972 645563 650630 651737 651880 652547 655212 Changes: mdadm (3.2.3-2) unstable; urgency=low . [ Michael Tokarev ] * new upstream bugfix/stable version, with lots of fixes all over. Closes: #641886, #628667, #645563, #651880, #607375, #633880 * update Neil's email (Closes: #650630) * update mdadd.sh to version 1.52 (Closes: #655212) * fixed a typo (RAID6 vs RAID10) in FAQ (Closes: #637068) * declare ordering dependency for multipath-tools-boot in mdadm-raid init script (Closes: #641584) While at it, remove mention of devfsd * added Slovak (sk.po) po-debconf translation from Slavko li...@slavino.sk (Closes: #641972) * set nice value of the check/resync thread too, together with I/O scheduling class, based on patch by Sergey B Kirpichev (Closes: #652547) * small changes for debian/checkarray * (internal) move files from contrib/* topgit branches into debian directory * remove dh_testroot from clean target * add myself to uploaders . [ Peter Eisentraut ] * Added support for status action to mdadm init script (Closes: #651737) ** Tags added: regression-update -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/920324 Title: Please sync mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/920324/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 920324] Re: Please sync mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions)
PPA of mdadm 3.2.3-2 for Ubuntu 12.04 https://launchpad.net/~nutznboltz/+archive/mdadm-3.2.3-2 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/920324 Title: Please sync mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/920324/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 920324] Re: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions)
I have a server running with the 3.2.3-2 from my PPA now. $ lsb_release -ds Ubuntu precise (development branch) $ uname -srvi Linux 3.2.0-14-generic #23-Ubuntu SMP Fri Feb 3 23:17:59 UTC 2012 x86_64 $ ps ax | grep mdadm | grep -v grep 15618 ?Ss 0:00 /sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan --syslog $ sudo mdadm --monitor --scan --oneshot $ echo $? 0 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/920324 Title: Please merge mdadm 3.2.3-2 from Debian unstable (main) (multiple regressions) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/920324/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
I tried installing sssd and the error message only prints the first line: $ sudo id sudo: setresuid(ROOT_UID, ROOT_UID, ROOT_UID): Operation not permitted The sssd.conf file is a copy of one that works on CentOS 6. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
That was with the libgcrypt11 GnuTLS package (2.12.14-5ubuntu2). Once I switch back to a GnuTLS with nettle then sssd works, supporting sudo. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 920324] Re: /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running
** Summary changed: - noise from /etc/cron.daily/mdadm + /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/920324 Title: /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/920324/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 920324] Re: /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running
** Description changed: + Reproducing: + + 1. Install Ubuntu 12.04 with md raid. + + My system has: + + $ cat /proc/mdstat + Personalities : [raid1] [linear] [multipath] [raid0] [raid6] [raid5] [raid4] [raid10] + md1 : active raid1 sdb2[1] sda2[0] + 522048 blocks [2/2] [UU] + + md0 : active raid1 sdb1[1] sda1[0] + 10490304 blocks [2/2] [UU] + + md2 : active raid1 sdc1[0] sdd1[1] + 805305143 blocks super 1.2 [2/2] [UU] + + unused devices: none + + 2. Try running this mdadm command, observe unexpected results: + + # mdadm --monitor --scan --oneshot + mdadm: Only one autorebuild process allowed in scan mode, aborting + + 3. Also cron will send mail: + /etc/cron.daily/mdadm: mdadm: Only one autorebuild process allowed in scan mode, aborting run-parts: /etc/cron.daily/mdadm exited with return code 1 - fixed in Debian, please merge from them. + 4. Stop any mdadm processes (but only for testing, it is unacceptable to + turn off mdadm monitoring.) + + # service mdadm stop + + 5. Try running, observe expected results: + # mdadm --monitor --scan --oneshot + (no output) + + This issue was fixed in Debian, please d-i this version: + + Format: 1.8 + Date: Wed, 18 Jan 2012 22:33:01 +0400 + Source: mdadm + Binary: mdadm mdadm-udeb + Architecture: source i386 + Version: 3.2.3-2 + Distribution: unstable + Urgency: low + Maintainer: Debian mdadm maintainers pkg-mdadm-de...@lists.alioth.debian.org + Changed-By: Michael Tokarev m...@tls.msk.ru + Description: + mdadm - tool to administer Linux MD arrays (software RAID) + mdadm-udeb - tool to administer Linux MD arrays (software RAID) (udeb) + Closes: 607375 628667 633880 637068 641584 641886 641972 645563 650630 651737 651880 652547 655212 + Changes: + mdadm (3.2.3-2) unstable; urgency=low + . +[ Michael Tokarev ] +* new upstream bugfix/stable version, with lots of fixes all over. + Closes: #641886, #628667, #645563, #651880, #607375, #633880 +* update Neil's email (Closes: #650630) +* update mdadd.sh to version 1.52 (Closes: #655212) +* fixed a typo (RAID6 vs RAID10) in FAQ (Closes: #637068) +* declare ordering dependency for multipath-tools-boot in + mdadm-raid init script (Closes: #641584) + While at it, remove mention of devfsd +* added Slovak (sk.po) po-debconf translation from Slavko li...@slavino.sk + (Closes: #641972) +* set nice value of the check/resync thread too, together with I/O + scheduling class, based on patch by Sergey B Kirpichev (Closes: #652547) +* small changes for debian/checkarray +* (internal) move files from contrib/* topgit branches into debian directory +* remove dh_testroot from clean target +* add myself to uploaders + . +[ Peter Eisentraut ] +* Added support for status action to mdadm init script (Closes: #651737) ** Tags added: testcase ** Tags added: precise -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/920324 Title: /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/920324/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 920324] Re: /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running
Title was updated based on advice in: https://wiki.ubuntu.com/UbuntuDevelopment/NewPackages ** Description changed: Reproducing: 1. Install Ubuntu 12.04 with md raid. My system has: - $ cat /proc/mdstat - Personalities : [raid1] [linear] [multipath] [raid0] [raid6] [raid5] [raid4] [raid10] + $ cat /proc/mdstat + Personalities : [raid1] [linear] [multipath] [raid0] [raid6] [raid5] [raid4] [raid10] md1 : active raid1 sdb2[1] sda2[0] - 522048 blocks [2/2] [UU] - + 522048 blocks [2/2] [UU] + md0 : active raid1 sdb1[1] sda1[0] - 10490304 blocks [2/2] [UU] - + 10490304 blocks [2/2] [UU] + md2 : active raid1 sdc1[0] sdd1[1] - 805305143 blocks super 1.2 [2/2] [UU] - + 805305143 blocks super 1.2 [2/2] [UU] + unused devices: none 2. Try running this mdadm command, observe unexpected results: # mdadm --monitor --scan --oneshot mdadm: Only one autorebuild process allowed in scan mode, aborting 3. Also cron will send mail: /etc/cron.daily/mdadm: mdadm: Only one autorebuild process allowed in scan mode, aborting run-parts: /etc/cron.daily/mdadm exited with return code 1 4. Stop any mdadm processes (but only for testing, it is unacceptable to turn off mdadm monitoring.) # service mdadm stop 5. Try running, observe expected results: # mdadm --monitor --scan --oneshot (no output) - This issue was fixed in Debian, please d-i this version: + This issue was fixed in Debian, please Debian Import this version: Format: 1.8 Date: Wed, 18 Jan 2012 22:33:01 +0400 Source: mdadm Binary: mdadm mdadm-udeb Architecture: source i386 Version: 3.2.3-2 Distribution: unstable Urgency: low Maintainer: Debian mdadm maintainers pkg-mdadm-de...@lists.alioth.debian.org Changed-By: Michael Tokarev m...@tls.msk.ru - Description: - mdadm - tool to administer Linux MD arrays (software RAID) - mdadm-udeb - tool to administer Linux MD arrays (software RAID) (udeb) + Description: + mdadm - tool to administer Linux MD arrays (software RAID) + mdadm-udeb - tool to administer Linux MD arrays (software RAID) (udeb) Closes: 607375 628667 633880 637068 641584 641886 641972 645563 650630 651737 651880 652547 655212 - Changes: - mdadm (3.2.3-2) unstable; urgency=low - . -[ Michael Tokarev ] -* new upstream bugfix/stable version, with lots of fixes all over. - Closes: #641886, #628667, #645563, #651880, #607375, #633880 -* update Neil's email (Closes: #650630) -* update mdadd.sh to version 1.52 (Closes: #655212) -* fixed a typo (RAID6 vs RAID10) in FAQ (Closes: #637068) -* declare ordering dependency for multipath-tools-boot in - mdadm-raid init script (Closes: #641584) - While at it, remove mention of devfsd -* added Slovak (sk.po) po-debconf translation from Slavko li...@slavino.sk - (Closes: #641972) -* set nice value of the check/resync thread too, together with I/O - scheduling class, based on patch by Sergey B Kirpichev (Closes: #652547) -* small changes for debian/checkarray -* (internal) move files from contrib/* topgit branches into debian directory -* remove dh_testroot from clean target -* add myself to uploaders - . -[ Peter Eisentraut ] -* Added support for status action to mdadm init script (Closes: #651737) + Changes: + mdadm (3.2.3-2) unstable; urgency=low + . + [ Michael Tokarev ] + * new upstream bugfix/stable version, with lots of fixes all over. + Closes: #641886, #628667, #645563, #651880, #607375, #633880 + * update Neil's email (Closes: #650630) + * update mdadd.sh to version 1.52 (Closes: #655212) + * fixed a typo (RAID6 vs RAID10) in FAQ (Closes: #637068) + * declare ordering dependency for multipath-tools-boot in + mdadm-raid init script (Closes: #641584) + While at it, remove mention of devfsd + * added Slovak (sk.po) po-debconf translation from Slavko li...@slavino.sk + (Closes: #641972) + * set nice value of the check/resync thread too, together with I/O + scheduling class, based on patch by Sergey B Kirpichev (Closes: #652547) + * small changes for debian/checkarray + * (internal) move files from contrib/* topgit branches into debian directory + * remove dh_testroot from clean target + * add myself to uploaders + . + [ Peter Eisentraut ] + * Added support for status action to mdadm init script (Closes: #651737) ** Summary changed: - /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running + Please sync mdam 3.2.3-2 from Debian unstable (main) (was: /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running) ** Summary changed: - Please sync mdam 3.2.3-2 from Debian unstable (main) (was: /etc/cron.daily/mdadm fails if mdadm monitor daemon is already running) + Please sync mdadm 3.2.3-2 from Debian unstable (main) (was: /etc/cron.daily/mdadm fails if mdadm monitor
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
This will never be fixed in Lucid and Lucid has the use nscd work- around. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libnss-ldap in Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
This will never be fixed in Lucid and Lucid has the use nscd work- around. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
Debian bug for this issue: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658739 ** Bug watch added: Debian Bug tracker #658739 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658739 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 509734] Re: initgroups() fails when using libnss-ldap (but not nscd)
*** This bug is a duplicate of bug 926350 *** https://bugs.launchpad.net/bugs/926350 ** This bug is no longer a duplicate of bug 423252 NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd ** This bug has been marked a duplicate of bug 926350 LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libnss-ldap in Ubuntu. https://bugs.launchpad.net/bugs/509734 Title: initgroups() fails when using libnss-ldap (but not nscd) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/at/+bug/509734/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
*** This bug is a duplicate of bug 926350 *** https://bugs.launchpad.net/bugs/926350 ** This bug has been marked a duplicate of bug 926350 LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libnss-ldap in Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
@ubuntu-treblig I do so appreciate your wisdom. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 509734] Re: initgroups() fails when using libnss-ldap (but not nscd)
*** This bug is a duplicate of bug 926350 *** https://bugs.launchpad.net/bugs/926350 ** This bug is no longer a duplicate of bug 423252 NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd ** This bug has been marked a duplicate of bug 926350 LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/509734 Title: initgroups() fails when using libnss-ldap (but not nscd) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/at/+bug/509734/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
*** This bug is a duplicate of bug 926350 *** https://bugs.launchpad.net/bugs/926350 ** This bug has been marked a duplicate of bug 926350 LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
PPA for the patch suggested by Howard Chu's in comment #73 https://launchpad.net/~nutznboltz/+archive/howard-chu-libgcrypt11-patch- for-ldap-clients -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libnss-ldap in Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
According to Andreas Metzler
http://lists.debian.org/debian-legal/2011/02/msg6.html
{{ GnuTLS upstream has added support for different crypto backends in
2.11.x and has chosen nettle as prefered backend (2.10.x is using
libgcrypt). }}
I have started to experiment with using a gnutls26 package with nettle
instead of libgcrypt11 on Ubuntu 12.04.
I have yet to adjust the gnutls26 package dependencies, at this point
I just cheat and install nettle-dev manually:
sudo apt-get install nettle-dev
Then I
apt-get source gnutls26
to fetch the source for gnutls26-2.12.14
chop out
--with-libgcrypt
from debian/rules
bump the package version in debian/changelog to 2.12.14-5ubuntu2.1
and rebuild with
debuild -i -uc -us -b
then I put a checkpoint on the VM and install the package:
dpkg -i libgnutls26_2.12.14-5ubuntu2.1_amd64.deb
but then sudo works on my LDAP+SSL client.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252
Title:
NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
suexec, and atd
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
This bug no longer pertains to be as it is opened against libgcrypt11 now and to me this is now a GnuTLS backend selection bug. I put the patched gnutls into this PPA as my preferred solution. https://launchpad.net/~nutznboltz/+archive/gnutls26-with-nettle -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libnss-ldap in Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
I meant to type no longer pertains to me not to be. I am unsubscribing from this bug report. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libnss-ldap in Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
PPA for the patch suggested by Howard Chu's in comment #73 https://launchpad.net/~nutznboltz/+archive/howard-chu-libgcrypt11-patch- for-ldap-clients -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
According to Andreas Metzler
http://lists.debian.org/debian-legal/2011/02/msg6.html
{{ GnuTLS upstream has added support for different crypto backends in
2.11.x and has chosen nettle as prefered backend (2.10.x is using
libgcrypt). }}
I have started to experiment with using a gnutls26 package with nettle
instead of libgcrypt11 on Ubuntu 12.04.
I have yet to adjust the gnutls26 package dependencies, at this point
I just cheat and install nettle-dev manually:
sudo apt-get install nettle-dev
Then I
apt-get source gnutls26
to fetch the source for gnutls26-2.12.14
chop out
--with-libgcrypt
from debian/rules
bump the package version in debian/changelog to 2.12.14-5ubuntu2.1
and rebuild with
debuild -i -uc -us -b
then I put a checkpoint on the VM and install the package:
dpkg -i libgnutls26_2.12.14-5ubuntu2.1_amd64.deb
but then sudo works on my LDAP+SSL client.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/423252
Title:
NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
suexec, and atd
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
This bug no longer pertains to be as it is opened against libgcrypt11 now and to me this is now a GnuTLS backend selection bug. I put the patched gnutls into this PPA as my preferred solution. https://launchpad.net/~nutznboltz/+archive/gnutls26-with-nettle -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] [NEW] LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
Public bug reported: If your account is an LDAP one and your LDAP client connects to its LDAP server via SSL then running setuid programs from your account fail since libgcrypt11 is horribly broken and upstream GnuTLS no longer recommends using it as the backend crypto library: http://lists.debian.org/debian-legal/2011/02/msg6.html In the past it was possible to work around this by using nscd but that work around no longer has any effect. When I rebuild gnutls26 with nettle I am able to use setuid binaries from my LDAP account which connects via SSL to its LDAP server. ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: libgnutls26 2.12.14-5ubuntu2 ProcVersionSignature: Ubuntu 3.2.0-12.21-generic 3.2.2 Uname: Linux 3.2.0-12-generic i686 ApportVersion: 1.91-0ubuntu1 Architecture: i386 Date: Fri Feb 3 16:22:47 2012 InstallationMedia: Ubuntu 11.10 Oneiric Ocelot - Release i386 (20111011) ProcEnviron: PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: gnutls26 UpgradeStatus: No upgrade log present (probably fresh install) ** Affects: gnutls26 (Ubuntu) Importance: Undecided Status: New ** Tags: apport-bug i386 precise running-unity -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
** Description changed: If your account is an LDAP one and your LDAP client connects to its LDAP server via SSL then running setuid programs from your account fail since libgcrypt11 is horribly broken and upstream GnuTLS no longer recommends using it as the backend crypto library: http://lists.debian.org/debian-legal/2011/02/msg6.html + + In the past it was possible to work around this by using nscd but that + work around no longer has any effect. When I rebuild gnutls26 with nettle I am able to use setuid binaries from my LDAP account which connects via SSL to its LDAP server. ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: libgnutls26 2.12.14-5ubuntu2 ProcVersionSignature: Ubuntu 3.2.0-12.21-generic 3.2.2 Uname: Linux 3.2.0-12-generic i686 ApportVersion: 1.91-0ubuntu1 Architecture: i386 Date: Fri Feb 3 16:22:47 2012 InstallationMedia: Ubuntu 11.10 Oneiric Ocelot - Release i386 (20111011) ProcEnviron: - PATH=(custom, no user) - LANG=en_US.UTF-8 - SHELL=/bin/bash + PATH=(custom, no user) + LANG=en_US.UTF-8 + SHELL=/bin/bash SourcePackage: gnutls26 UpgradeStatus: No upgrade log present (probably fresh install) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
I meant to type no longer pertains to me not to be. I am unsubscribing from this bug report. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 926350] Re: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11
PPA with patch for the benefit of other affected people: https://launchpad.net/~nutznboltz/+archive/gnutls26-with-nettle ** Description changed: If your account is an LDAP one and your LDAP client connects to its LDAP server via SSL then running setuid programs from your account fail since libgcrypt11 is horribly broken and upstream GnuTLS no longer recommends using it as the backend crypto library: http://lists.debian.org/debian-legal/2011/02/msg6.html In the past it was possible to work around this by using nscd but that work around no longer has any effect. When I rebuild gnutls26 with nettle I am able to use setuid binaries from my LDAP account which connects via SSL to its LDAP server. + + Reproducing: + + 1. Install an OpenLDAP server that speaks LDAP over SSL, see + https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html + for details. + + 2. Install Ubuntu 12.04 and configure it to be an LDAP client that + connects via to its LDAP server via SSL. + + 3. Log into the Ubuntu 12.04 created in step using an LDAP account not + an account in /etc/passwd. + + 4. Attempt to use sudo. You will see unexpected results: + + nutz@dubnium:~$ sudo id + [sudo] password for nutz: + sudo: setresuid(ROOT_UID, ROOT_UID, ROOT_UID): Operation not permitted + sudo: unable to open /var/lib/sudo/nutz/1: Operation not permitted + sudo: unable to set gid to runas gid 0: Operation not permitted + sudo: unable to execute /usr/bin/id: Operation not permitted + nutz@dubnium:~$ + ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: libgnutls26 2.12.14-5ubuntu2 ProcVersionSignature: Ubuntu 3.2.0-12.21-generic 3.2.2 Uname: Linux 3.2.0-12-generic i686 ApportVersion: 1.91-0ubuntu1 Architecture: i386 Date: Fri Feb 3 16:22:47 2012 InstallationMedia: Ubuntu 11.10 Oneiric Ocelot - Release i386 (20111011) ProcEnviron: PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: gnutls26 UpgradeStatus: No upgrade log present (probably fresh install) ** Tags added: testcase ** Description changed: If your account is an LDAP one and your LDAP client connects to its LDAP server via SSL then running setuid programs from your account fail since libgcrypt11 is horribly broken and upstream GnuTLS no longer recommends using it as the backend crypto library: http://lists.debian.org/debian-legal/2011/02/msg6.html In the past it was possible to work around this by using nscd but that work around no longer has any effect. When I rebuild gnutls26 with nettle I am able to use setuid binaries from my LDAP account which connects via SSL to its LDAP server. Reproducing: 1. Install an OpenLDAP server that speaks LDAP over SSL, see https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html for details. 2. Install Ubuntu 12.04 and configure it to be an LDAP client that connects via to its LDAP server via SSL. 3. Log into the Ubuntu 12.04 created in step using an LDAP account not an account in /etc/passwd. 4. Attempt to use sudo. You will see unexpected results: nutz@dubnium:~$ sudo id - [sudo] password for nutz: + [sudo] password for nutz: sudo: setresuid(ROOT_UID, ROOT_UID, ROOT_UID): Operation not permitted sudo: unable to open /var/lib/sudo/nutz/1: Operation not permitted sudo: unable to set gid to runas gid 0: Operation not permitted sudo: unable to execute /usr/bin/id: Operation not permitted - nutz@dubnium:~$ + nutz@dubnium:~$ + 5. Apply patched version of gnutls26, see attached branch. + + 6. Attempt to use sudo. You will see expected results: + + nutz@dubnium:~$ sudo id + [sudo] password for nutz: + uid=0(root) gid=0(root) groups=0(root) ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: libgnutls26 2.12.14-5ubuntu2 ProcVersionSignature: Ubuntu 3.2.0-12.21-generic 3.2.2 Uname: Linux 3.2.0-12-generic i686 ApportVersion: 1.91-0ubuntu1 Architecture: i386 Date: Fri Feb 3 16:22:47 2012 InstallationMedia: Ubuntu 11.10 Oneiric Ocelot - Release i386 (20111011) ProcEnviron: PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: gnutls26 UpgradeStatus: No upgrade log present (probably fresh install) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/926350 Title: LDAP account via SSL cannot use setuid binaries until gnutls26 is rebuilt with nettle not libgcrypt11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/926350/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
Thanks Colin Watson, you do such great work! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 902722] Re: Critical error on update (ia32-libs-multiarch:i386)
*** This bug is a duplicate of bug 900512 *** https://bugs.launchpad.net/bugs/900512 @kensay-kavi you need to run: apport-collect 902722 to complete this bug report. Otherwise it's dead. ** This bug has been marked a duplicate of bug 900512 ia32-libs-multiarch:i386 is not installable -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/902722 Title: Critical error on update (ia32-libs-multiarch:i386) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/902722/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
I tested with Ubuntu 12.04 today and the nscd work-around no longer works. The failure occurs with or without running nscd on Ubuntu 12.04. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libnss-ldap in Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
** Tags added: precise -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libnss-ldap in Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
@Colin: that will not work for /dev/vda on Ubuntu 10.04. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
Oh, right after I wrote that I remembered LP: #623609 Does 1.98-1ubuntu13 fix that? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
I tested with Ubuntu 12.04 today and the nscd work-around no longer works. The failure occurs with or without running nscd on Ubuntu 12.04. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
** Tags added: precise -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/423252 Title: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
@dblade it's the price that you pay for not doing the SRU work yourself. The reward for being the one to do the work is that you don't have to listen to the ones who are doing it for you. Why not spend some time learning how to do the work? I have some information for you: http://www.youtube.com/watch?v=h1NcFYUS3uAfmt=18#t=2m52s -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
Interesting dates in the life of LP: #563895 March 21, 2010 - Reported as Debian #574863 April 4, 2010 (elapsed 14 days) Reported as LP: #563895 June 2, 2010 (elapsed 73 days) Fix committed into Debian and Debian bug closed. July 5, 2010 (elapsed 106 days) Fix committed in Ubuntu 10.10 (Maverick) September 10, 2011 (538 days) Complaint (not by me) in LP #563895 using the words not having a fix for this in LTS after more than a year makes me sad November 8, 2011 (597 days) I convert bug into SRU request with debdiff of patch and PPA with patched grub2 packages. November 14, 2011 (604 days) by submitting this question I am able to get someone to acknowledge that this bug needs work. January 20, 2012 (670 days) day which I, the only person on Earth who is going to know enough to do the testing, is referred to by Marvin Pitt as anyone else affected. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
Sorry, Colin, it's not about you. I'll explain later if I get the chance. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
The following non-developers have made comments in this bug indicating they understand at least a little bit about this problem: * https://launchpad.net/~alvind * https://launchpad.net/~nigelbabu * https://launchpad.net/~listmail * https://launchpad.net/~berni * https://launchpad.net/~bugs-sehe * https://launchpad.net/~p1 * https://launchpad.net/~nirkus * https://launchpad.net/~torsten * https://launchpad.net/~ubuntu-launchpad-lk2 * https://launchpad.net/~dougie-hobson Why aren't they testing now? What could be wrong? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
Why aren't they testing now? What could be wrong? Wait! Maybe it's that they are all stupid! Yeah, that's it they're too stupid to test. Don't worry stupid people, I'll do your testing for you. nutz@lp-563895:~$ apt-cache policy grub-pc grub-pc: Installed: 1.98-1ubuntu13 Candidate: 1.98-1ubuntu13 Version table: *** 1.98-1ubuntu13 0 100 /var/lib/dpkg/status 1.98-1ubuntu12 0 900 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main Packages 1.98-1ubuntu5 0 500 http://us.archive.ubuntu.com/ubuntu/ lucid/main Packages ksta@lp-563895:~$ apt-cache policy grub-pc grub-common grub-pc: Installed: 1.98-1ubuntu13 Candidate: 1.98-1ubuntu13 Version table: *** 1.98-1ubuntu13 0 100 /var/lib/dpkg/status 1.98-1ubuntu12 0 900 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main Packages 1.98-1ubuntu5 0 500 http://us.archive.ubuntu.com/ubuntu/ lucid/main Packages grub-common: Installed: 1.98-1ubuntu13 Candidate: 1.98-1ubuntu13 Version table: *** 1.98-1ubuntu13 0 100 /var/lib/dpkg/status 1.98-1ubuntu12 0 900 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main Packages 1.98-1ubuntu5 0 500 http://us.archive.ubuntu.com/ubuntu/ lucid/main Packages nutz@lp-563895:~$ sudo grub-install /dev/vda Installation finished. No error reported. nutz@lp-563895:~$ lsb_release -ds ; uname -a Ubuntu 10.04.3 LTS Linux lp-563895 2.6.32-37-server #81-Ubuntu SMP Fri Dec 2 20:49:12 UTC 2011 x86_64 GNU/Linux -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
nutz@lp-563895:~$ sudo lvcreate -s -l 437 /dev/vg0/lv0 Logical volume lvol0 created nutz@lp-563895:~$ sudo vgs VG #PV #LV #SN Attr VSize VFree vg01 3 1 wz--n- 6.00g0 nutz@lp-563895:~$ sudo lvs LVVG Attr LSize Origin Snap% Move Log Copy% Convert lv0 vg0 owi-ao 3.81g lvol0 vg0 swi-a- 1.71g lv0 0.00 swap vg0 -wi-ao 488.00m nutz@lp-563895:~$ df -h / /boot FilesystemSize Used Avail Use% Mounted on /dev/mapper/vg0-lv0 3.9G 955M 2.9G 25% / /dev/mapper/vg0-lv0 3.9G 955M 2.9G 25% / nutz@lp-563895:~$ sudo reboot -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
The system rebooted with the snapshot. Everything works. Thanks. ** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 790201] Re: Cannot use SR-IOV feature of Intel 82576 network card
@Sergey Svishchev (svs) Seems I should have read your comments more closely. I just noticed the part about blacklisting the igbvf module, so it won't attach to VF devices. I will test that on 12.04 soon. My PPA: https://launchpad.net/~nutznboltz/+archive/kvm-libvirt-lts did get updated to KVM/qemu 0.14.0 some time ago. I did not receive a server with SR-IOV and IOMMU until recently which delayed a lot of my work. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/790201 Title: Cannot use SR-IOV feature of Intel 82576 network card To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/790201/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 790201] Re: Cannot use SR-IOV feature of Intel 82576 network card
Works! 1. install 12.04 LTS (no PPA's or other modifications) 2. configure igb via /etc/modprobe.d/igb.conf contains: options igb max_vfs=7 /etc/modprobe.d/blacklist-igbvf.conf blacklist igbvf 3. put those configuration files in the initrd sudo update-initramfs -k all -t -u 4. reboot 5. lspci will display Virtual Function repeated. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/790201 Title: Cannot use SR-IOV feature of Intel 82576 network card To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/790201/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 639712] Re: PCI Pass Through via libvirt cannot remap IRQ's
I'm trying with 12.04 LTS KVM host and guest.
RHEL 6 documentation says: {{ Secure device assignment also requires
interrupt remapping support. If a platform does not support interrupt
remapping, device assignment will fail. To use device assignment without
interrupt remapping support in a development environment, set the
allow_unsafe_assigned_interrupts KVM module parameter to 1. }}
and I get in dmesg:
[ 5556.500176] kvm_iommu_map_guest: No interrupt remapping support,
disallowing device assignment. Re-enble with
allow_unsafe_assigned_interrupts=1 module option.
Easy to create
/etc/modprobe.d/kvm.conf containing
options kvm allow_unsafe_assigned_interrupts=1
However, there is CVE-2011-1898 which this makes your system vulnerable
to see:
https://bugzilla.redhat.com/show_bug.cgi?id=71
** Bug watch added: Red Hat Bugzilla #71
https://bugzilla.redhat.com/show_bug.cgi?id=71
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-1898
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/639712
Title:
PCI Pass Through via libvirt cannot remap IRQ's
To manage notifications about this bug go to:
https://bugs.launchpad.net/linux/+bug/639712/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 639712] Re: PCI Pass Through via libvirt cannot remap IRQ's
allow_unsafe_assigned_interrupts=1 does work: $ grep QEMU /proc/cpuinfo model name : QEMU Virtual CPU version 1.0 model name : QEMU Virtual CPU version 1.0 $ lspci | grep Fun 00:05.0 Ethernet controller: Intel Corporation 82576 Virtual Function (rev 01) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/639712 Title: PCI Pass Through via libvirt cannot remap IRQ's To manage notifications about this bug go to: https://bugs.launchpad.net/linux/+bug/639712/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 790201] Re: Cannot use SR-IOV feature of Intel 82576 network card
I'm seeing not enough MMIO resources for SR-IOV when I use max_vfs=7 on: $ uname -srvm Linux 3.2.0-8-generic #15-Ubuntu SMP Wed Jan 11 13:57:44 UTC 2012 x86_64 $ lsb_release -ds Ubuntu precise (development branch) $ lspci -nn | grep Eth 03:00.0 Ethernet controller [0200]: Intel Corporation 82576 Gigabit Network Connection [8086:10c9] (rev 01) 03:00.1 Ethernet controller [0200]: Intel Corporation 82576 Gigabit Network Connection [8086:10c9] (rev 01) 04:00.0 Ethernet controller [0200]: Intel Corporation 82576 Gigabit Network Connection [8086:10c9] (rev 01) 04:00.1 Ethernet controller [0200]: Intel Corporation 82576 Gigabit Network Connection [8086:10c9] (rev 01) 05:00.0 Ethernet controller [0200]: Intel Corporation 82576 Gigabit Network Connection [8086:10c9] (rev 01) 05:00.1 Ethernet controller [0200]: Intel Corporation 82576 Gigabit Network Connection [8086:10c9] (rev 01) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/790201 Title: Cannot use SR-IOV feature of Intel 82576 network card To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/790201/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 790201] Re: Cannot use SR-IOV feature of Intel 82576 network card
There is a possibility that a necessary patch (based on a statement by Linus) was vetoed by Bjorn Helgaas bjorn.helgaas@hp@ com Start of thread: http://marc.info/?l=linux-kernelm=128392923724817w=2 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/790201 Title: Cannot use SR-IOV feature of Intel 82576 network card To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/790201/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 790201] Re: Cannot use SR-IOV feature of Intel 82576 network card
The OP has redhat-bugs #652210 as the Red Hat bug but that is wrong. That one was closed with Status: CLOSED NOTABUG This one is much more interesting: https://bugzilla.redhat.com/show_bug.cgi?id=523341 I think the story is: 1. BIOS doesn't know about SR-IOV Virtual Functions so it does not report it to the kernel 2. kernel sees the BIOS didn't report about the SR-IOV Virtual Functions so it disables the device. If you read through https://bugzilla.redhat.com/show_bug.cgi?id=523341 you will find Yinghai Lu yinghai@%! kernel.org was working on a patch that could automatically detect and correct this but it had issues and was removed (reverted) from upstream. Linus Torvalds suggested that Yinghai Lu use manual kernel options allow specifying information not provided by the BIOS http://marc.info/?l=linux-kernelm=127846075028242w=2 Ram Pai linuxram @%@~@ us.ibm.com submitted (signed off on) the kernel patches with the manual-overide Yinghai Lu http://marc.info/?l=linux-kernelm=128392923724817w=2 Bjorn Helgaas bjorn.helgaas@hp@ com vetoed (failed to integrate) the patch http://marc.info/?l=linux-kernelm=128392923724817w=2 Meanwhile RHEL 5.7 supposedly supports working SR-IOV VFs https://bugzilla.redhat.com/show_bug.cgi?id=523341 ** Bug watch added: Red Hat Bugzilla #523341 https://bugzilla.redhat.com/show_bug.cgi?id=523341 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/790201 Title: Cannot use SR-IOV feature of Intel 82576 network card To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/790201/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 896388] Re: restart broken - Regression Caused by LP: #600941
I'm back, feel free to ask for non-developer QA testing from me. Thanks. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/896388 Title: restart broken - Regression Caused by LP: #600941 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nagios-nrpe/+bug/896388/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 896388] Re: restart broken - Regression Caused by LP: #600941
I will be on vacation through Jan 5, 2012. Please do not ask for testing until after that date, thanks. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/896388 Title: restart broken - Regression Caused by LP: #600941 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nagios-nrpe/+bug/896388/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
I will be on vacation through Jan 5, 2012. Please do not ask for testing until after that date, thanks. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 600941] Re: stop doesn't stop only the host's process on LXC szerver
http://askubuntu.com/questions/82631/what-is-the-way-to-submit-a-patch- to-fix-all-the-damage-that-lp-600941-causes -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/600941 Title: stop doesn't stop only the host's process on LXC szerver To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nagios-nrpe/+bug/600941/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 692691] Re: update-grub thinks my kernel is a xen one
Thank you very much for this nifty fix. I pushed it out to 38 systems that use grub1 today. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/692691 Title: update-grub thinks my kernel is a xen one To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub/+bug/692691/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 896388] [NEW] Fix Regression Caused by LP: #600941
Public bug reported: After LP: #600941 was pushed out all of our systems started experiencing Nagios nrpe restart failures. Commands like /etc/init.d/nagios-nrpe-server restart would cause nrpe to stop but not restart. I tracked this down to the way that the /etc/init.d/nagios-nrpe-server script is calling start-stop-daemon. The issue is that the stop stanza in the /etc/init.d/nagios-nrpe- server script first calls start-stop-daemon which sends SIGTERM to nrpe and then waits only for one second. If nrpe has not exited by that time the pid file will still exist and the /etc/init.d/nagios-nrpe-server script will remove it. Worse if /etc/init.d/nagios-nrpe-server restart is used not only will the pid file be removed, the attempt to restart nrpe will fail provided that the nrpe daemon is still tardy in shutting down. The attempt to start under those circumstances will fail because nrpe will still be bound to a socket and the second attempt at binding will cause the nrpe startup to abort. They should have wondered why there was a comment about sometimes the pid file does not get removed. They should have tested on systems that have a heavy load and therefore slow nrpe response times. The fix is to add --retry 10 or such to the invocation of start-stop- daemon ... --stop ... Patch forthcoming, see http://askubuntu.com/questions/82631/what-is-the-way-to-submit-a-patch- to-fix-all-the-damage-that-lp-600941-causes See also https://launchpad.net/~nutznboltz/+archive/nrpe-unbreak-lp-600941 ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: nagios-nrpe-server (not installed) ProcVersionSignature: Ubuntu 3.2.0-1.3-generic 3.2.0-rc2 Uname: Linux 3.2.0-1-generic i686 ApportVersion: 1.90-0ubuntu1 Architecture: i386 Date: Fri Nov 25 14:38:05 2011 InstallationMedia: Ubuntu 11.10 Oneiric Ocelot - Release i386 (20111011) ProcEnviron: PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: nagios-nrpe UpgradeStatus: No upgrade log present (probably fresh install) ** Affects: nagios-nrpe (Ubuntu) Importance: Undecided Status: New ** Tags: apport-bug i386 precise running-unity -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/896388 Title: Fix Regression Caused by LP: #600941 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nagios-nrpe/+bug/896388/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 896388] Re: Fix Regression Caused by LP: #600941
** Description changed: After LP: #600941 was pushed out all of our systems started experiencing Nagios nrpe restart failures. Commands like /etc/init.d/nagios-nrpe-server restart would cause nrpe to stop but not restart. I tracked this down to the way that the /etc/init.d/nagios-nrpe-server script is calling start-stop-daemon. The issue is that the stop stanza in the /etc/init.d/nagios-nrpe- server script first calls start-stop-daemon which sends SIGTERM to nrpe and then waits only for one second. If nrpe has not exited by that time the pid file will still exist and the /etc/init.d/nagios-nrpe-server script will remove it. Worse if /etc/init.d/nagios-nrpe-server restart is used not only will the pid file be removed, the attempt to restart nrpe will fail provided that the nrpe daemon is still tardy in shutting down. The attempt to start under those circumstances will fail because nrpe will still be bound to a socket and the second attempt at binding will cause the nrpe startup to abort. They should have wondered why there was a comment about sometimes the pid file does not get removed. They should have tested on systems that have a heavy load and therefore slow nrpe response times. The fix is to add --retry 10 or such to the invocation of start-stop- daemon ... --stop ... Patch forthcoming, see http://askubuntu.com/questions/82631/what-is-the-way-to-submit-a-patch- to-fix-all-the-damage-that-lp-600941-causes + See also + + https://launchpad.net/~nutznboltz/+archive/nrpe-unbreak-lp-600941 + ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: nagios-nrpe-server (not installed) ProcVersionSignature: Ubuntu 3.2.0-1.3-generic 3.2.0-rc2 Uname: Linux 3.2.0-1-generic i686 ApportVersion: 1.90-0ubuntu1 Architecture: i386 Date: Fri Nov 25 14:38:05 2011 InstallationMedia: Ubuntu 11.10 Oneiric Ocelot - Release i386 (20111011) ProcEnviron: - PATH=(custom, no user) - LANG=en_US.UTF-8 - SHELL=/bin/bash + PATH=(custom, no user) + LANG=en_US.UTF-8 + SHELL=/bin/bash SourcePackage: nagios-nrpe UpgradeStatus: No upgrade log present (probably fresh install) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/896388 Title: Fix Regression Caused by LP: #600941 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nagios-nrpe/+bug/896388/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 600941] Re: stop doesn't stop only the host's process on LXC szerver
See LP: #896388 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/600941 Title: stop doesn't stop only the host's process on LXC szerver To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nagios-nrpe/+bug/600941/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 896388] Re: Fix Regression Caused by LP: #600941
I'm OK with just using my PPA for now and letting the rest of the world stay broken. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/896388 Title: Fix Regression Caused by LP: #600941 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nagios-nrpe/+bug/896388/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 896388] Re: Fix Regression Caused by LP: #600941
http://ubuntuforums.org/showthread.php?t=1886725 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/896388 Title: Fix Regression Caused by LP: #600941 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nagios-nrpe/+bug/896388/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 600941] Re: stop doesn't stop only the host's process on LXC szerver
Regrettably start-stop-daemon is a C program that resulted from translating a Perl script and it shows. There are far too many global varibles in start-stop-daemon.c and although there are some nice blocks of comments there are far to few comments that explain the intent behind variable names such as schedule (the string schedule appears in many contexts.) The manual page for start-stop-daemon strongly suggests that unless you use the --retry option the start-stop-daemon program may return before the process it sent a signal to actually calls exit() and terminates, however it doesn't actually state this in plain English. The obtuseness of start-stop-daemon is most likely the reason that the fixed version of the script includes a dubious comment indicating that sometimes the pid file has not been removed. I can easily see why someone would not understand that he left the --retry option missing. This bug also causes failures when the script is given the restart option; the nrpe daemon will shutdown but not start up again. Did I mention that since applying the update our nrpe servers started crashing over and over? Repairing this is why I am doing this work. I have been working on remediating the fix. You can see my current work in this PPA. https://launchpad.net/~nutznboltz/+archive/nrpe-unbreak-lp-600941 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/600941 Title: stop doesn't stop only the host's process on LXC szerver To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nagios-nrpe/+bug/600941/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 600941] Re: stop doesn't stop only the host's process on LXC szerver
$ grep -i sometimes /etc/init.d/nagios-nrpe-server #sometimes deleting the pidfile fails. cleanup afterwards. That got past QA? It looks like a red flag to me. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/600941 Title: stop doesn't stop only the host's process on LXC szerver To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nagios-nrpe/+bug/600941/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 692691] Re: update-grub thinks my kernel is a xen one
Verified on Lucid
$ lsb_release -ds
Ubuntu 10.04.3 LTS
$ uname -svrm
Linux 2.6.38-12-server #51~lucid1-Ubuntu SMP Thu Sep 29 20:09:53 UTC 2011 x86_64
$ grep QEM /proc/cpuinfo
model name : QEMU Virtual CPU version 0.14.0
$ df -h / | tail -n 1 | awk '{ print $1 }'
/dev/vda2
$ sudo apt-get purge grub grub-common
$ cd /boot/grub
$ rm -rf *
$ cd -
$ sudo aptitude -t lucid-proposed install grub grub-common
$ dpkg -l | grep grub | awk '/ii.*grub/ { print $2 $3 }'
grub 0.97-29ubuntu60.10.04.2
grub-common 1.98-1ubuntu12
$ sudo update-grub
Searching for GRUB installation directory ... found: /boot/grub
Searching for default file ... found: /boot/grub/default
Testing for an existing GRUB menu.lst file ...
Could not find /boot/grub/menu.lst file. Would you like /boot/grub/menu.lst
generated for you? (y/N) y
Searching for splash image ... none found, skipping ...
Found kernel: /boot/memtest86+.bin
Found kernel: /boot/vmlinuz-2.6.38-12-server
Found kernel: /boot/vmlinuz-2.6.38-11-server
Found kernel: /boot/vmlinuz-2.6.32-35-server
Found kernel: /boot/memtest86+.bin
Updating /boot/grub/menu.lst ... done
$
** Tags removed: verification-needed
** Tags added: verification-done-lucid
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/692691
Title:
update-grub thinks my kernel is a xen one
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub/+bug/692691/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 692691] Re: update-grub thinks my kernel is a xen one
Repeated verification on VM guest with only 2.6.32 kernel with the same results. $ uname -svrm Linux 2.6.32-35-server #78-Ubuntu SMP Tue Oct 11 16:26:12 UTC 2011 x86_64 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/692691 Title: update-grub thinks my kernel is a xen one To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub/+bug/692691/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 604335] Re: grub-pc.postinst script fails to detect virtio vda disk in KVM guest
http://askubuntu.com/questions/80224/does-grub2-require-an-optional- scsi-feature -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/604335 Title: grub-pc.postinst script fails to detect virtio vda disk in KVM guest To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/604335/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 692691] Re: update-grub thinks my kernel is a xen one
Thanks Clint. Are there plans to improve this section? https://wiki.ubuntu.com/StableReleaseUpdates#Verification I especially find it difficult to know if something is being expected of the bug reporter (or subscribers) or not. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/692691 Title: update-grub thinks my kernel is a xen one To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub/+bug/692691/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 692691] Re: update-grub thinks my kernel is a xen one
Oh, I just found this: https://wiki.ubuntu.com/QATeam/PerformingSRUVerification -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/692691 Title: update-grub thinks my kernel is a xen one To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub/+bug/692691/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 350936] Re: Should shut down domains on system shutdown
In comment #104 Serge wrote that he did the verification on Maverick. Based on that I'll update the tags. ** Tags removed: verification-needed ** Tags added: verification-done-maverick -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libvirt in Ubuntu. https://bugs.launchpad.net/bugs/350936 Title: Should shut down domains on system shutdown To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/350936/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 350936] Re: Should shut down domains on system shutdown
clint-fewbar, Thanks, I'll keep that in mind. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libvirt in Ubuntu. https://bugs.launchpad.net/bugs/350936 Title: Should shut down domains on system shutdown To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/350936/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 692691] Re: update-grub thinks my kernel is a xen one
@vorlon please read: http://ubuntuforums.org/showthread.php?t=1873424 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/692691 Title: update-grub thinks my kernel is a xen one To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub/+bug/692691/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 350936] Re: Should shut down domains on system shutdown
In comment #104 Serge wrote that he did the verification on Maverick. Based on that I'll update the tags. ** Tags removed: verification-needed ** Tags added: verification-done-maverick -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/350936 Title: Should shut down domains on system shutdown To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/350936/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 350936] Re: Should shut down domains on system shutdown
clint-fewbar, Thanks, I'll keep that in mind. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/350936 Title: Should shut down domains on system shutdown To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/350936/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 692691] Re: update-grub thinks my kernel is a xen one
Adding this link for my convenience https://launchpad.net/ubuntu/lucid/+source/grub/0.97-29ubuntu60.10.04.2 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/692691 Title: update-grub thinks my kernel is a xen one To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub/+bug/692691/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 888069] Re: SRU Request for LP: #563895
*** This bug is a duplicate of bug 563895 *** https://bugs.launchpad.net/bugs/563895 Colin ACKed LP: #563895 so I'm closing this one as a dup of that one. ** This bug has been marked a duplicate of bug 563895 grub2 fails to boot or install when an LVM snapshot exists -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/888069 Title: SRU Request for LP: #563895 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/888069/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 350936] Re: Should shut down domains on system shutdown
I could test on Natty later today. Adding link to pending SRU page for my convenience http://people.canonical.com/~ubuntu-archive/pending-sru.html -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libvirt in Ubuntu. https://bugs.launchpad.net/bugs/350936 Title: Should shut down domains on system shutdown To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/350936/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 350936] Re: Should shut down domains on system shutdown
Verified on natty-proposed.
$ dpkg -l | grep libvirt | awk '{print $2 $3}'
libvirt-bin 0.8.8-1ubuntu6.6
libvirt0 0.8.8-1ubuntu6.6
python-libvirt 0.8.8-1ubuntu6.6
$ lsb_release -ds
Ubuntu 11.04
$ uname -srvi
Linux 2.6.38-13-generic #52-Ubuntu SMP Tue Nov 8 16:53:51 UTC 2011 x86_64
$ cat /var/log/libvirt/shutdownlog.log
libvirt: libvirt-bin: entering pre-stop at Mon Nov 14 17:37:47 EST 2011
libvirt: libvirt-bin: attempting clean shutdown of test-vm at Mon Nov 14
17:37:47 EST 2011
libvirt: libvirt-bin: exiting pre-stop at Mon Nov 14 17:37:53 EST 2011
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in Ubuntu.
https://bugs.launchpad.net/bugs/350936
Title:
Should shut down domains on system shutdown
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/350936/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 350936] Re: Should shut down domains on system shutdown
I could test on Natty later today. Adding link to pending SRU page for my convenience http://people.canonical.com/~ubuntu-archive/pending-sru.html -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/350936 Title: Should shut down domains on system shutdown To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/350936/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 350936] Re: Should shut down domains on system shutdown
Verified on natty-proposed.
$ dpkg -l | grep libvirt | awk '{print $2 $3}'
libvirt-bin 0.8.8-1ubuntu6.6
libvirt0 0.8.8-1ubuntu6.6
python-libvirt 0.8.8-1ubuntu6.6
$ lsb_release -ds
Ubuntu 11.04
$ uname -srvi
Linux 2.6.38-13-generic #52-Ubuntu SMP Tue Nov 8 16:53:51 UTC 2011 x86_64
$ cat /var/log/libvirt/shutdownlog.log
libvirt: libvirt-bin: entering pre-stop at Mon Nov 14 17:37:47 EST 2011
libvirt: libvirt-bin: attempting clean shutdown of test-vm at Mon Nov 14
17:37:47 EST 2011
libvirt: libvirt-bin: exiting pre-stop at Mon Nov 14 17:37:53 EST 2011
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/350936
Title:
Should shut down domains on system shutdown
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/350936/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 563895] Re: grub2 fails to boot or install when an LVM snapshot exists
http://askubuntu.com/questions/79347/what-is-the-policy-for-updating- grub-pc-in-lts -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/563895 Title: grub2 fails to boot or install when an LVM snapshot exists To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/563895/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 795717] Re: 32bit rhel and centos 5.(5|6) hangs on boot on natty
How long does this take to show up? $ curl http://archive.ubuntu.com/ubuntu/pool/main/l/linux/ 2 /dev/null | grep 38-13.52 | egrep -v 'diff|dsc' | sed 's/^.*deb//' | sed 's;/a.*$;;' linux-doc_2.6.38-13.52_all.deb linux-libc-dev_2.6.38-13.52_amd64.deb linux-libc-dev_2.6.38-13.52_i386.deb linux-source-2.6.38_2.6.38-13.52_all.deb linux-tools-common_2.6.38-13.52_all.deb Compare that to $ curl http://archive.ubuntu.com/ubuntu/pool/main/l/linux/ 2 /dev/null | grep 38-12.51 | egrep -v 'diff|dsc' | sed 's/^.*deb//' | sed 's;/a.*$;;' | wc -l 166 Couldn't you at least start you one week or die countdown after it becomes possible to complete the task? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to qemu-kvm in Ubuntu. https://bugs.launchpad.net/bugs/795717 Title: 32bit rhel and centos 5.(5|6) hangs on boot on natty To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/795717/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
