[Touch-packages] [Bug 737615] Re: Can't save changes in "Edit Connections..." for Wi-Fi networks to which one doesn't have the password

2017-09-14 Thread Serge
*** This bug is a duplicate of bug 1409866 *** https://bugs.launchpad.net/bugs/1409866 The problem is in the settings of the connection, but unfortunates the manager does not display this information. SOLUTION: - start nm-connection-editor from the terminal (sudo is possible, bus probably n

[Touch-packages] [Bug 1164016] Re: restore type-ahead find

2018-03-30 Thread Serge
Unfortunately this is really a deal-breaker for me and forces me to drop Nautilus and experiment with other, perhaps not so well developed/maintained, GUI file managers. What a pity. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribe

[Touch-packages] [Bug 1310746] Re: NetworkManager wired ethernet times out waiting for dhcp on 14.04 trusty tahr

2014-10-17 Thread Serge
Affects even running 14.04 from live CD. On fresh install network manager does not work also, even setting static IPs. Ping says destination host unreachable 99% queries and very long timeout 1%. This means network does not work at all. -- You received this bug notification because you are a memb

[Touch-packages] [Bug 1700814] Re: Default capability of cap_setfcap+i should be set on setcap

2022-10-18 Thread Serge Hallyn
> FWIW This used to be the default inside the libcap build tree, but the > problems with the container defaults (eventually fixed with > https://github.com/moby/moby/security/advisories/GHSA-2mm7-x5h6-5pvq Thanks for the links. For a moment I was worried that there was an issue with containers in

[Touch-packages] [Bug 1923232] [NEW] SRU of LXC 4.0.6 to focal (upstream bugfix release)

2021-04-09 Thread Serge Hallyn
built in -proposed are functional. ** Affects: lxc (Ubuntu) Importance: Undecided Status: New ** Affects: lxc (Ubuntu Bionic) Importance: High Assignee: Serge Hallyn (serge-hallyn) Status: New ** Affects: lxc (Ubuntu Focal) Importance: High Assignee

[Touch-packages] [Bug 1923232] Re: SRU of LXC 4.0.6 to focal (upstream bugfix release)

2021-04-09 Thread Serge Hallyn
** No longer affects: lxc (Ubuntu Bionic) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1923232 Title: SRU of LXC 4.0.6 to focal (upstream bugfix release) Status in lxc pack

[Touch-packages] [Bug 1923232] Re: SRU of LXC 4.0.6 to focal (upstream bugfix release)

2021-04-09 Thread Serge Hallyn
** Changed in: lxc (Ubuntu Focal) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1923232 Title: SRU of LXC 4.0.6 to focal (upstream bugfix re

[Touch-packages] [Bug 1532314] Re: Buffer overflow in cgmanager

2020-08-11 Thread Serge Hallyn
I'm not sure 'fix released' is correct. Was a patch posted to fix it? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1532314 Title: Buffer overflow in cgmanager Status in cg

[Touch-packages] [Bug 2012437] [NEW] Ship a static libsystemd.a

2023-03-21 Thread Serge Hallyn
Public bug reported: More and more things are requiring linking against libsystemd. In particular, because dbus is now linked against libsystemd, anything that wants to make a dbus client call needs it. By not shipping a static libsystemd.a, all such users are prevented from building statically.

[Touch-packages] [Bug 2039873] Re: liblxc-dev was built with LXC_DEVEL=1 in Ubuntu Jammy/Kinetic

2023-10-23 Thread Serge Hallyn
> Looking at the changelog, it appears that Serge simply pulled all changes following 5.0.1 from git, which he likely did mistakenly looking at the master branch rather than the stable-5.0 branch which wouldn't have had that particular change. That sounds like exactly what I would do.

[Touch-packages] [Bug 1923262] Re: backup /etc/passwd- file should be mode 0600

2021-10-27 Thread Serge Hallyn
I appreciate you bringing this to our attention, but (as shadow upstream maintainer) I'm going to join John in saying this should be wontfix. Now if you want to change the subject to also making /etc/passwd 600, then as Alexander points out that may be doable and have merit. But just hiding the b

[Touch-packages] [Bug 1928309] Re: usermod change home directory no tilde

2021-10-27 Thread Serge Hallyn
Well that's just fascinating! :) This would be best reported at https://github.com/shadow- maint/shadow/issues. Would you mind opening an issue there? ** Changed in: shadow (Ubuntu) Status: New => Confirmed ** Changed in: shadow (Ubuntu) Importance: Undecided => Wishlist -- You rece

[Touch-packages] [Bug 1869267] Re: /etc/login.defs contains a non-ASCII character

2021-10-27 Thread Serge Hallyn
This is in the debian/login.defs file, and was replaced at least before bionic with a proper ascii ', so I'm targeting this to xenial. ** Changed in: shadow (Ubuntu) Status: New => Fix Released ** Also affects: shadow (Ubuntu Xenial) Importance: Undecided Status: New ** Changed

[Touch-packages] [Bug 1917187] Re: lxc cgroup2: containers unbootable

2022-02-27 Thread Serge Hallyn
FWIW this is affecting me on jammy too. I'll have to take a look at systemd sources. Adding: lxc.init.cmd = /sbin/init systemd.unified_cgroup_hierarchy to my config does not help, nor does bind mounting a /proc/filesystems without 'cgroup' (v1) in it. -- You received this bug notification bec

[Touch-packages] [Bug 1963834] Re: openssl 3.0 - SSL: UNSAFE_LEGACY_RENEGOTIATION_DISABLED]

2022-03-16 Thread Serge Hallyn
FWIW I'm seeing this with the openconnect-sso (https://github.com/vlaci/openconnect-sso) package on jammy. I just tried adding the following to my /etc/ssl/openssl.cfg: [ssl_configuration] client = client_tls_config [client_tls_config] Options = UnsafeLegacyServerConnect With no luck :( -- Yo

[Touch-packages] [Bug 1963834] Re: openssl 3.0 - SSL: UNSAFE_LEGACY_RENEGOTIATION_DISABLED]

2022-03-16 Thread Serge Hallyn
I tried also adding the following: [openssl_init] providers = provider_sect ssl_conf = ssl_configuration as I wasn't sure whether the [ssl_configuration] section would otherwise get used for anything, but that didn't seem to make a difference. The end of the file is [ssl_configuration] client =

[Touch-packages] [Bug 1963834] Re: openssl 3.0 - SSL: UNSAFE_LEGACY_RENEGOTIATION_DISABLED]

2022-03-16 Thread Serge Hallyn
Ok, I did get my case to work by creating ~/ssl.conf containing: openssl_conf = openssl_init [openssl_init] ssl_conf = ssl_sect [ssl_sect] system_default = system_default_sect [system_default_sect] Options = UnsafeLegacyRenegotiation And then did OPENSSL_CONF=~/ssl.conf do-my-command that wor

[Touch-packages] [Bug 1966590] Re: cups segfault when printing or editing printers

2022-03-27 Thread Serge Hallyn
This makes it impossible for me to print from my laptop :( -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1966590 Title: cups segfault when printing or editing printers Stat

[Touch-packages] [Bug 1966590] [NEW] cups segfault when printing or editing printers

2022-03-27 Thread Serge Hallyn
Public bug reported: Editing a printer in localhost:631, cups keeps segfaulting after (possibly related) access denied messages: [932068.059601] audit: type=1400 audit(1648388571.894:566): apparmor="DENIED" operation="connect" profile="/usr/bin/evince" name="/run/user/1000/at-spi/bus_0" pid=853

[Touch-packages] [Bug 1966590] Re: cups segfault when printing or editing printers

2022-03-27 Thread Serge Hallyn
The permission denied errors appear unrelated: after stopping apparmor and restarting cups, I still get: [932499.635684] cupsd[855122]: segfault at 0 ip 7f39be2ff98c sp 7ffc12737718 error 4 in libc.so.6[7f39be176000+195000] [932499.635695] Code: 1e fa 89 f8 31 d2 62 a1 fd 00 ef c0 09 f0

[Touch-packages] [Bug 1966590] Re: cups segfault when printing or editing printers

2022-03-27 Thread Serge Hallyn
(Forcibly downgrading to the impish packages restored ability to print.) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1966590 Title: cups segfault when printing or editing

[Touch-packages] [Bug 1700814] Re: Default capability of cap_setfcap+i should be set on setcap

2022-05-20 Thread Serge Hallyn
** Changed in: libcap2 (Ubuntu) Assignee: Serge Hallyn (serge-hallyn) => Balint Reczey (rbalint) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to libcap2 in Ubuntu. https://bugs.launchpad.net/bugs/1700814 Ti

[Touch-packages] [Bug 1757091] Re: systemctl enable lightdm

2019-03-08 Thread Serge Hartmann
Is there a workaround tip in order to re-enable lightdm in ubuntu 18.04 ? I am using systemd. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1757091 Title: systemctl enabl

[Touch-packages] [Bug 1174939] Re: [HDA-Intel - HDA Intel PCH, playback] Sound is distorted

2020-03-12 Thread Serge Andrusenko
Not the issue anymore -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to alsa-driver in Ubuntu. https://bugs.launchpad.net/bugs/1174939 Title: [HDA-Intel - HDA Intel PCH, playback] Sound is distorted Status in alsa-driver pac

[Touch-packages] [Bug 1321854] Re: useradd doesn't add the default shell to /etc/passwd entry

2020-04-15 Thread Serge Hallyn
Tested this in eoan. New user got the SHELL=zsh which I specified in /etc/default/useradd ** Changed in: shadow (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubuntu

[Touch-packages] [Bug 1759247] Re: lxc-copy forgets to change /etc/hostname and /etc/hosts

2020-04-15 Thread Serge Hallyn
Tested this in eoan - hostname had the new name. ** Changed in: lxc (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1759247 Title:

[Touch-packages] [Bug 600653] Re: passwd man mistake minage -m should be -n

2020-04-15 Thread Serge Hallyn
** Changed in: shadow (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubuntu. https://bugs.launchpad.net/bugs/600653 Title: passwd man mistake minage -m should be -n S

[Touch-packages] [Bug 998816] Re: Login password is shown in plaintext

2020-04-15 Thread Serge Hallyn
This is actually a bug in getty, which accepts the username and then starts login. ** Package changed: shadow (Ubuntu) => util-linux (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.

[Touch-packages] [Bug 998816] Re: Login password is shown in plaintext

2020-04-15 Thread Serge Hallyn
Note this was wishlist in shadow, but i can't find wishlist in the list of options any more. ** Changed in: util-linux (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubu

[Touch-packages] [Bug 1872443] Re: /etc/securetty missing: dovecot not working

2020-04-15 Thread Serge Hallyn
This was a decision made by the debian package (see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771675 ). Would you mind raising a bug against pam and shadow in debian bringing this up? Perhaps the libpam-modules package should supply it alongside the pam_securetty.so. Please let us know if

[Touch-packages] [Bug 1808864] Re: Poor translation of zh_CN gpasswd(1) man page

2020-04-15 Thread Serge Hallyn
Would you mind comparing this to the new version at https://github.com/shadow-maint/shadow/blob/master/po/zh_CN.po ? I looked for the 'administrator' one, and that seems fixed. Any other updates you have which you could post as pull requests against the upstream project would be greatly appreci

[Touch-packages] [Bug 1811893] Re: In Ubuntu on Virtualbox, the screen is blank after sign-in

2020-04-15 Thread Serge Hallyn
Thanks for reporting this bug. This looks to be a bug with either xubuntu login manager or xubuntu default X11 session, so I'm reassigning it to lightdm. ** Package changed: shadow (Ubuntu) => lightdm (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Touch seeded

[Touch-packages] [Bug 1817496] Re: Login always shows partitions to be fsck-ed, even after reboot.

2020-04-15 Thread Serge Hallyn
You should be able to manually do fsck /dev/sda5 If the filesystem on sda5 is listed in /etc/fstab, then sixth fstab field for that filesystem should be '2'. If it is 0, then indeed it won't be fsck'd on reboot. fstab is owned by util-linux, but system bringup belongs to systemd, so I'm assigni

[Touch-packages] [Bug 1817496] Re: Login always shows partitions to be fsck-ed, even after reboot.

2020-04-15 Thread Serge Hallyn
Please show the results of 'mount | grep sda5' and the contents of /etc/fstab. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu. https://bugs.launchpad.net/bugs/1817496 Title: Login always shows partitions

[Touch-packages] [Bug 1860926] Re: Ubuntu 20.04 Systemd fails to configure bridged network

2020-04-21 Thread Serge CLAUS
Same problem for me on Raspi 4 (bridged networking) I have found a quick and dirty workaround: In crontab: @reboot root netplan apply -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu. https://bugs.launchpad

[Touch-packages] [Bug 1679765] Re: cannot lock password for user created with useradd --extrausers

2020-05-19 Thread Serge Hallyn
Extrausers is a concept introduced by the libnss-extrausers package. shadow and passwd simply know nothing about it. It simply is not a bug in the shadow package. It's a wholly un- implemented feature. It's not clear to me how this would function - after all these are supposed to be accounts 'copi

[Touch-packages] [Bug 1565345] Re: ubuntuBSD support

2020-05-19 Thread Serge Hallyn
Hi, looking at the package today, control already has libaudit-dev [linux- any] and --with-audit was dropped from rules, so I believe what you want should already be achieved. Please re-open if that's not the case. ** Changed in: shadow (Ubuntu) Status: New => Fix Released -- You receiv

[Touch-packages] [Bug 1547907] Re: package login 1:4.1.5.1-1ubuntu9.2 failed to install/upgrade: unable to install new version of `/bin/su': Device or resource busy

2020-05-19 Thread Serge Hallyn
Thanks for reporting this bug. Please reply if you have some situation where this might still occur. ** Changed in: shadow (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubun

[Touch-packages] [Bug 1482786] Re: man-db daily cron job TOCTOU bug when processing catman pages

2020-05-19 Thread Serge Hallyn
@cjwatson - is it safe to assume the fix was entirely in man-db? Or was shadow supposed to do something here as well? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apport in Ubuntu. https://bugs.launchpad.net/bugs/1482786

[Touch-packages] [Bug 1450880] Re: Impossible to set root password in Ubuntu Touch

2020-05-19 Thread Serge Hallyn
If this is still an issue, please re-open this bug. ** Changed in: shadow (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubuntu. https://bugs.launchpad.net/bugs/1450880

[Touch-packages] [Bug 1388272] Re: Login screen shows different background picture such as set for desktop background

2020-05-19 Thread Serge Hallyn
This clearly is not related to shadow, but which package it affects would depend on which login manager was being used. In the unlikely event this is still an issue, please re-open this bug and let us know which you are using. ** Changed in: shadow (Ubuntu) Status: New => Incomplete -- Y

[Touch-packages] [Bug 914499] Re: 'su --help' exits with error code 2

2020-05-19 Thread Serge Hallyn
** Changed in: shadow (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubuntu. https://bugs.launchpad.net/bugs/914499 Title: 'su --help' exits with error code 2 Status i

[Touch-packages] [Bug 1770233] Re: Login package changes MIN_UID in /etc/login.defs -> AccountsService/GDM then ignores existing user (UID 501) -> starts gnome-inital-setup to create user

2020-05-24 Thread Serge Hallyn
** Package changed: shadow (Ubuntu) => gnome-initial-setup (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubuntu. https://bugs.launchpad.net/bugs/1770233 Title: Login package changes MIN_UID in /etc/logi

[Touch-packages] [Bug 1595080] Re: /etc/shadow has wrong ownership

2020-05-24 Thread Serge Hallyn
On my 18.04 laptop it is group shadow and group readable. If anyone can still reproduce this, please re-open this bug. It is likely an intaller bug. ** Changed in: shadow (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch

[Touch-packages] [Bug 1608026] Re: package login 1:4.1.5.1-1ubuntu9 failed to install/upgrade: package login is not ready for configuration cannot configure (current status `half-installed')

2020-05-24 Thread Serge Hallyn
** Changed in: shadow (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubuntu. https://bugs.launchpad.net/bugs/1608026 Title: package login 1:4.1.5.1-1ubuntu9 failed to i

[Touch-packages] [Bug 1669156] Re: Fails writing with Caps Lock

2020-05-24 Thread Serge Hallyn
This is not a shadow bug. It's either a bug in the graphical login manager, or X, or a terminal driver. Please re-open if it is still relevant. ** Package changed: shadow (Ubuntu) => lightdm (Ubuntu) ** Changed in: lightdm (Ubuntu) Status: New => Incomplete -- You received this bug not

[Touch-packages] [Bug 621528] Re: package nfs-common 1:1.2.0-4ubuntu4 failed to install/upgrade: el subproceso script post-installation instalado devolvió el código de salida de error 1

2020-05-24 Thread Serge Hallyn
** Package changed: shadow (Ubuntu) => nfs-utils (Ubuntu) ** Changed in: nfs-utils (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubuntu. https://bugs.launchpad.net/bugs/62152

[Touch-packages] [Bug 117736] Re: pam_mount unable to unmount needs root priv

2020-05-24 Thread Serge Hallyn
Marking fix released for shadow based on the openssh and debian status. ** Changed in: shadow (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in Ubuntu. https://bugs.l

[Touch-packages] [Bug 73024] Re: unknown item 'FAIL_DELAY'

2020-05-24 Thread Serge Hallyn
Marking invalid as the comment in login.defs says these are handled by pam. ** Changed in: shadow (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubuntu. https://bugs.lau

[Touch-packages] [Bug 1490110] Re: package lxc 1.1.3-0ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 100

2015-10-21 Thread Serge Hallyn
Raising priority since as rbasak pointed out, all vivid cloud image updates to wily will hit this. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apport in Ubuntu. https://bugs.launchpad.net/bugs/1490110 Title: package lxc

[Touch-packages] [Bug 1490110] Re: package lxc 1.1.3-0ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 100

2015-10-21 Thread Serge Hallyn
SystemError: E:Sub-process /usr/bin/dpkg returned an error code (1) Error in sys.excepthook: Traceback (most recent call last): File "/usr/lib/python3/dist-packages/apport_python_hook.py", line 102, in apport_excepthook pr.add_proc_info(extraenv=['PYTHONPATH', 'PYTHONHOME']) File "/usr/lib

[Touch-packages] [Bug 1490110] Re: package lxc 1.1.3-0ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 100

2015-10-21 Thread Serge Hallyn
I still think the bug is actually not in lxc. If I take a vivid cloud image, manually install the wily lxc packages with dpkg, that works. Then do-release-upgrade still fails. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to

[Touch-packages] [Bug 1490110] Re: package lxc 1.1.3-0ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 100

2015-10-21 Thread Serge Hallyn
The original complaint appears to be: dpkg: dependency problems prevent configuration of liblxc1: liblxc1 depends on libdbus-1-3 (>= 1.9.14); however: Version of libdbus-1-3:amd64 on system is 1.8.12-1ubuntu5. The libdbus version being installed is higher than that. Note that that dependency

[Touch-packages] [Bug 1508577] Re: [wily] installing juju-local on ARM64 failed. broken apt dependency

2015-10-21 Thread Serge Hallyn
Please show the results of "systemctl status lxc-net.service" and "journalctl -xe" -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1508577 Title: [wily] installing juju-local

[Touch-packages] [Bug 1490110] Re: package lxc 1.1.3-0ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 100

2015-10-21 Thread Serge Hallyn
But even when pre-installing the newer dbus, it still fails with the invoke-rc.d failure. I can't explain that one, have no idea why it is trying to use the /etc/init.d script. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to

Re: [Touch-packages] [Bug 1504781] Re: lxc-test-ubuntu hangs forever in trusty-proposed with Linux 3.13.0-66: AppArmor denies /dev/ptmx mounting

2015-10-22 Thread Serge Hallyn
Quoting Stratos Zolotas (str...@gmail.com): > Another one has asked but no reply yet. Is a fix for 12.04 going to be > released? The bug is still valid there. Which bug are you looking for? You're using a backport or ppa or custom built lxc and are looking for a kernel fix? -- You received this

[Touch-packages] [Bug 1508744] Re: Upgrade to Ubuntu 15.10 Broken: lxc-net.service fails on upgrade

2015-10-22 Thread Serge Hallyn
Please show the results of sudo systemctl status lxc-net.service sudo journalctl -u lxc-net sudo journalctl -xe ifconfig -a cat /etc/default/lxc-net ** Changed in: lxc (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Touch seede

[Touch-packages] [Bug 1508577] Re: [wily] installing juju-local on ARM64 failed. broken apt dependency

2015-10-22 Thread Serge Hallyn
Sorry, could you please show the result of sudo journalctl -u lxc-net if that doesn't seem to show anything, then maybe do sudo systemctl start lxc-net sudo journalctl -u lxc-net -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed

[Touch-packages] [Bug 1508744] Re: Upgrade to Ubuntu 15.10 Broken: lxc-net.service fails on upgrade

2015-10-22 Thread Serge Hallyn
Was yours also on an upgrade from vivid to wily? Were you using the stock archive lxc packages? Any customizatoin of the lxc-net configuration? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.laun

[Touch-packages] [Bug 1504781] Re: lxc-test-ubuntu hangs forever in trusty-proposed with Linux 3.13.0-66: AppArmor denies /dev/ptmx mounting

2015-10-23 Thread Serge Hallyn
Judging by jjohansen's comment #8, I guess the shipped common configuration files in precise's lxc should be updated to include the new rule. Precise's lxc is in universe, community supported. Can you provide a proposed, tested debdiff and ping me? I'll sponsor it when ready if needed. -- You

[Touch-packages] [Bug 1509414] Re: lxc postinst script checks available interfaces, can choose

2015-10-23 Thread Serge Hallyn
Debdiff which works for me. I tested this by creating a cloud container, temporarily setting USE_LXC_BRIDGE=false, rebooting, building the package, setting USE_LXC_BRIDGE=true (leaving 10.0.3 as the lxcbr0 subnet), rebooting. lxcbr0 comes up with 10.0.4.1 as expected. A nested trusty container wo

[Touch-packages] [Bug 1509414] Re: lxc postinst script checks available interfaces, can choose

2015-10-23 Thread Serge Hallyn
I don't like disabling lxc-net, because it's simpler to tell a user to apt-get install lxd than to systemctl enable lxc-net or echo "USE_LXC_BRIDGE=true" | sudo tee -a /etc/default/lxc-net systemctl restart lxc-net -- You received this bug notification because you are a member of Ubuntu Touc

[Touch-packages] [Bug 1509414] Re: lxc postinst script checks available interfaces, can choose

2015-10-23 Thread Serge Hallyn
Updated debdiff, which 1. stops creation of /etc/default/lxc-net on package install 2. removes that file only if upgrading from the 1.0.4ubuntu4 version with an umodified /etc/default/lxc-net file ** Patch added: "lxcnet4.debdiff" https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1509414/+

[Touch-packages] [Bug 1509414] Re: pre-installed lxc in cloud image produces broken lxc (and later lxd) containers

2015-10-23 Thread Serge Hallyn
new patch. It upgrades a broken container fine, but lxc-net is not properly started until I manually call /usr/lib/x86_64-linux-gnu/lxc/lxc-net stop /usr/lib/x86_64-linux-gnu/lxc/lxc-net start or reboot ** Patch added: "lxcnet6.debdiff" https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/15

[Touch-packages] [Bug 1509414] Re: pre-installed lxc in cloud image produces broken lxc (and later lxd) containers

2015-10-23 Thread Serge Hallyn
Final proposed patch for now. Uploaded to ppa:serge-hallyn/lxc-natty for wily. Installing this on a fresh ubuntu-cloud wily container (i.e. a broken one) results in working lxcbr0 on new subnet. ** Patch added: "lxcnet8.debdiff" https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1509414/+att

[Touch-packages] [Bug 1509414] Re: pre-installed lxc in cloud image produces broken lxc (and later lxd) containers

2015-10-23 Thread Serge Hallyn
Handle one more corner case ** Patch added: "lxcnet9.debdiff" https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1509414/+attachment/4503630/+files/lxcnet9.debdiff -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ub

[Touch-packages] [Bug 1509414] Re: pre-installed lxc in cloud image produces broken lxc (and later lxd) containers

2015-10-23 Thread Serge Hallyn
** Patch added: "And one more to fix in vms" https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1509414/+attachment/4503681/+files/lxcneta.debdiff -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs

[Touch-packages] [Bug 1508577] Re: [wily] installing juju-local on ARM64 failed. broken apt dependency

2015-10-23 Thread Serge Hallyn
Ah, thanks for that info. ** Changed in: lxc (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1508577 Title: [wily] installing juju-lo

[Touch-packages] [Bug 1509414] Re: pre-installed lxc in cloud image produces broken lxc (and later lxd) containers

2015-10-24 Thread Serge Hallyn
New image works for me in lxc: lxcbr0Link encap:Ethernet HWaddr 76:79:3e:90:1c:88 inet addr:10.0.4.1 Bcast:0.0.0.0 Mask:255.255.255.0 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.laun

[Touch-packages] [Bug 1509414] Re: pre-installed lxc in cloud image produces broken lxc (and later lxd) containers

2015-10-24 Thread Serge Hallyn
I was able to For stage two, at least with systemd, I changed /lib/systemd/system/lxd-startup.service to: [Unit] Description=Container hypervisor based on LXC - boot time check After=cgmanager.service lxd-unix.socket Requires=cgmanager.service lxd-unix.socket [Service] Type=oneshot ExecStart=/usr

[Touch-packages] [Bug 1509414] Re: pre-installed lxc in cloud image produces broken lxc (and later lxd) containers

2015-10-24 Thread Serge Hallyn
This lxc debdiff (not appropriate upstream lxc) and a pull request against lxd-pkg-ubuntu (https://github.com/lxc/lxd-pkg-ubuntu/pull/7) combined should implement stage 2 of the fix. Note I've tested these when separately implemented by hand, but have not built packages with this debdiff+pull-requ

Re: [Touch-packages] [Bug 1509414] Re: pre-installed lxc in cloud image produces broken lxc (and later lxd) containers

2015-10-25 Thread Serge Hallyn
to that subnet), we must > make sure we do not regress anyone who's been relying on "apt-get > install lxc" providing something that can immediately be used both by > root and for unprivileged users. > > Serge: We may be able to provide a hook, added to > /usr/share/lx

[Touch-packages] [Bug 1498162] Re: unable to make backup link of `./usr/sbin/uuidd' before installing new version: Operation not permitted

2015-10-26 Thread Serge Hallyn
It's the setuid and setgid bits with user namespace. ** Also affects: linux (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net

[Touch-packages] [Bug 1498162] Re: unable to make backup link of `./usr/sbin/uuidd' before installing new version: Operation not permitted

2015-10-26 Thread Serge Hallyn
You can work around this by doing echo 0 | sudo tee -a /proc/sys/fs/protected_hardlinks on the host. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/1498162 Title: una

[Touch-packages] [Bug 1504781] Re: lxc-test-ubuntu hangs forever in trusty-proposed with Linux 3.13.0-66: AppArmor denies /dev/ptmx mounting

2015-10-27 Thread Serge Hallyn
@stefan-huehner - sorry, I'm losing track. is what you are asking for just a lxc update to precise-proposed with the new apparmor allow rule that jj suggested? If so, in comment #33 I was trying to encourage a debdiff to be posted by someone who could best test it. I'll then sponsor it into the

Re: [Touch-packages] [Bug 1509752] [NEW] Bug in ensure_not_symlink() from 0003-CVE-2015-1335.patch

2015-10-27 Thread Serge Hallyn
Thanks - haven't tested, but it certainly makes sense. status: confirmed importance: high ** Changed in: lxc (Ubuntu) Importance: Undecided => High ** Changed in: lxc (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch s

[Touch-packages] [Bug 1472369] Re: lxcbr0 missing after starting lxc-net.service

2015-10-27 Thread Serge Hallyn
*** This bug is a duplicate of bug 1468611 *** https://bugs.launchpad.net/bugs/1468611 @paugnu which ubuntu release are you on and what is your dnsmasq version? (dpkg -l dnsmasq) Do you have bind installed? Does creating /etc/dnsmasq.conf fix without having to clear out /etc/dnsmasq.d/lxc

[Touch-packages] [Bug 1509752] Re: Bug in ensure_not_symlink() from 0003-CVE-2015-1335.patch

2015-10-27 Thread Serge Hallyn
Apparently the kernel is now fixed so that we should be able to use the upstream fix. I'm going to try to get that into the trusty package rather than keep tweakng this separate patch. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscr

[Touch-packages] [Bug 1504781] Re: lxc-test-ubuntu hangs forever in trusty-proposed with Linux 3.13.0-66: AppArmor denies /dev/ptmx mounting

2015-10-28 Thread Serge Hallyn
** Also affects: linux (Ubuntu Precise) Importance: Undecided Status: New ** Also affects: lxc (Ubuntu Precise) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubun

[Touch-packages] [Bug 1504781] Re: lxc-test-ubuntu hangs forever in trusty-proposed with Linux 3.13.0-66: AppArmor denies /dev/ptmx mounting

2015-10-28 Thread Serge Hallyn
** Description changed: + == + SRU Justification: + Impact: containers fail to start! + Regression potential: we only add a copy of an existing apparmor allow rule + with a different syntax (no trailing /), leaving the old one for o

[Touch-packages] [Bug 1509752] Re: Bug in ensure_not_symlink() from 0003-CVE-2015-1335.patch

2015-10-28 Thread Serge Hallyn
Yup, switching in the upstream fix works - will upload that in a bit. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1509752 Title: Bug in ensure_not_symlink() from 0003-CVE-2

[Touch-packages] [Bug 1509752] Re: Bug in ensure_not_symlink() from 0003-CVE-2015-1335.patch

2015-10-28 Thread Serge Hallyn
** Also affects: lxc (Ubuntu Trusty) Importance: Undecided Status: New ** Changed in: lxc (Ubuntu Trusty) Importance: Undecided => High ** Changed in: lxc (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Touc

[Touch-packages] [Bug 1509752] Re: Bug in ensure_not_symlink() from 0003-CVE-2015-1335.patch

2015-10-28 Thread Serge Hallyn
No, sadly one testcase - lxc-test-unpriv - still fails: Oct 28 15:33:49 lxct1 kernel: [ 2659.417204] type=1400 audit(1446046429.177:52): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="/usr/bin/lxc-start" name="/home/lxcunpriv/.local/share/lxc/c1/rootfs/dev/consol

[Touch-packages] [Bug 1509752] Re: Bug in ensure_not_symlink() from 0003-CVE-2015-1335.patch

2015-10-28 Thread Serge Hallyn
** Description changed: - This bug/limitation is present in lxc from 1.0.7-0ubuntu0.5 through - 1.0.7-0ubuntu0.9 (or anything that incorporates - 0003-CVE-2015-1335.patch). Basically, the limitation is obvious when - using recursive bind mounts because ensure_not_symlink() only checks the - last

[Touch-packages] [Bug 1509752] Re: Bug in ensure_not_symlink() from 0003-CVE-2015-1335.patch

2015-10-28 Thread Serge Hallyn
(invalid would probably be a better status for the development release, but i dont' want to scare the SRU team :) Uploaded a workaround for this bug. Using the upstream fix sadly is still broken by apparmor+overlayfs bugs. -- You received this bug notification because you are a member of Ubuntu

[Touch-packages] [Bug 1504496] Re: package lxc 1.1.4-0ubuntu0.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2015-10-30 Thread Serge Hallyn
Actually the most telling sign in the logs here is Oct 09 11:56:42 quelbo lxc-net[23366]: lxc-net is already running If someone can reproduce this again, please attach the same information Nick had assigned in addition to 'ifconfig -a' and 'systemctl -u lxc- net' output. ** Changed in: lxc (Ubu

[Touch-packages] [Bug 1504496] Re: package lxc 1.1.4-0ubuntu0.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2015-10-30 Thread Serge Hallyn
(marking incomplete as we need more information to debug, but we've lost the reproducer) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1504496 Title: package lxc 1.1.4-0ubunt

[Touch-packages] [Bug 1504496] Re: package lxc 1.1.4-0ubuntu0.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2015-10-30 Thread Serge Hallyn
fwiw i don't think this is bug 1490110 because the signature is different - there is complaint about the sysv job not being there. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/

[Touch-packages] [Bug 1511830] Re: apparmor denies VM startup when image is network mounted

2015-11-02 Thread Serge Hallyn
Thanks for reporting this bug. Can you show the xml for the libvirt managed nfs storage and for the VM? The virt-aa-helper policy has # needed for when disk is on a network filesystem network inet, Which I suspect should prevent this from happening, so I will target this at apparmor. ** A

[Touch-packages] [Bug 1511875] Re: Can't upgrade from 15.10 Wily to 16.04 Xenial in LXC container

2015-11-02 Thread Serge Hallyn
same thing happens with vivid->wily upgrade. ** Changed in: ubuntu-release-upgrader (Ubuntu) Status: New => Confirmed ** Changed in: lxc (Ubuntu) Status: New => Triaged ** Changed in: lxc (Ubuntu) Importance: Undecided => High ** Changed in: ubuntu-release-upgrader (Ubuntu)

[Touch-packages] [Bug 1511875] Re: Can't upgrade from 15.10 Wily to 16.04 Xenial in LXC container

2015-11-02 Thread Serge Hallyn
It does this in an unprivileged (true root) as well as a apparmor- unconfined container. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1511875 Title: Can't upgrade from 15.10

[Touch-packages] [Bug 1511875] Re: Can't upgrade from 15.10 Wily to 16.04 Xenial in LXC container

2015-11-02 Thread Serge Hallyn
** Attachment added: "/var/log/dist-upgrade/apt.log file" https://bugs.launchpad.net/ubuntu/+source/ubuntu-release-upgrader/+bug/1511875/+attachment/4511345/+files/apt.log -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lx

[Touch-packages] [Bug 1511993] Re: when trying to install the lxd package, lxc fails to install

2015-11-02 Thread Serge Hallyn
Oct 31 18:12:17 majid-top lxc-net[6891]: iptables v1.4.21: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Oct 31 18:12:17 majid-top lxc-net[6891]: Perhaps iptables or your kernel needs to be upgraded. Oct 31 18:12:17 majid-top lxc-net[6891]: Failed to setup l

[Touch-packages] [Bug 1497420] Re: systemd 226 (moving pid 1 into /init.scope cgroup) breaks lxc-attach

2015-11-03 Thread Serge Hallyn
Yup, we need https://github.com/lxc/lxc/commit/f348e47c93568b4f0c371cf5df1c98d4e816a86c in the packages. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1497420 Title: system

[Touch-packages] [Bug 1475749] Re: usermod --add-subuids fails for users not in /etc/passwd

2015-11-03 Thread Serge Hallyn
** Changed in: shadow (Ubuntu Vivid) Status: Fix Committed => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubuntu. https://bugs.launchpad.net/bugs/1475749 Title: usermod --add-subuids fails for

[Touch-packages] [Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-03 Thread Serge Hallyn
@Kevin, could you please give some more details? In particular, release of both host and container, where exactly it fails, and the relevant journalctl output. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. h

[Touch-packages] [Bug 1475749] Re: usermod --add-subuids fails for users not in /etc/passwd

2015-11-03 Thread Serge Hallyn
(sorry, i msread the bug history) ** Changed in: shadow (Ubuntu Vivid) Status: Confirmed => Fix Committed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubuntu. https://bugs.launchpad.net/bugs/1475749 Title

[Touch-packages] [Bug 1475749] Re: usermod --add-subuids fails for users not in /etc/passwd

2015-11-03 Thread Serge Hallyn
The test case in the Description passed cleanly for me (and failed without -proposed) ** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to shadow in Ubuntu. ht

Re: [Touch-packages] [Bug 1294200] Re: test linked against nih-dbus-tool-generated libraryis not thread-safe

2015-11-03 Thread Serge Hallyn
I don't know. libnih is still a nice library and it would be nice if it could be fixed. Certainly the lxcfs bug should be marked invalid since we no longer use it. Perhaps lxc eventually, but not yet. -- You received this bug notification because you are a member of Ubuntu Touch seeded package

[Touch-packages] [Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-04 Thread Serge Hallyn
Hi, you're actually geting EPERM, which means lxcbr0 exists. Please show the output of: sudo lxc-start -n escale_build -F -l trace -o /dev/stdout sudo brctl show sudo ifconfig -a sudo journalctl -u lxc-net sudo systemd-detect-virt -- You received this bug notification because you are a member

  1   2   3   4   5   6   7   8   >