[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#990075: marked as done (lxc-attach fails after debian 10.10 update)

Your message dated Mon, 21 Jun 2021 12:02:07 +0000
with message-id <E1lvIcx-0005R6-69@fasolo.debian.org>
and subject line Bug#990072: fixed in linux 4.19.194-2
has caused the Debian Bug report #990072,
regarding lxc-attach fails after debian 10.10 update
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
990072: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990072
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: lxc
Version: 1:3.1.0+really3.0.3-8
Severity: grave
Justification: renders package unusable

Dear Maintainer,

Applied latest apt updates (debian 10.10) and rebooted.  After reboot, lxc-attach doesn't work.

from /var/log/apt/history.log:

Start-Date: 2021-06-19  12:27:42
Commandline: apt-get dist-upgrade
Requested-By: matthew (1011)
Install: linux-headers-4.19.0-17-common:amd64 (4.19.194-1, automatic), linux-headers-4.19.0-17-amd64:amd64 (4.19.194-1, automatic), linux-image-4.19.0-17-amd64:amd64 (4.19.194-1, automatic)
Upgrade: libapt-inst2.0:amd64 (1.8.2.2, 1.8.2.3),apt:amd64  (1.8.2.2, 1.8.2.3), mariadb-common:amd64 (1:10.3.27-0+deb10u1, 1:10.3.29-0+deb10u1), linux-compiler-gcc-8-x86:amd64 (4.19.181-1, 4.19.194-1), libklibc:amd64 (2.0.6-1, 2.0.6-1+deb10u1), libcpupower1:amd64 (4.19.181-1, 4.19.194-1), libapt-pkg5.0:amd64 (1.8.2.2, 1.8.2.3), shim-helpers-amd64-signed:amd64 (1+15+1533136590.3beb971+7+deb10u1, 1+15.4+5~deb10u1), linux-image-amd64:amd64 (4.19+105+deb10u11, 4.19+105+deb10u12), libgcrypt20:amd64 (1.8.4-5, 1.8.4-5+deb10u1), linux-headers-amd64:amd64 (4.19+105+deb10u11, 4.19+105+deb10u12), libhogweed4:amd64 (3.4.1-1, 3.4.1-1+deb10u1), apt-utils:amd64 (1.8.2.2, 1.8.2.3), shim-unsigned:amd64 (15+1533136590.3beb971-7+deb10u1, 15.4-5~deb10u1), shim-signed:amd64 (1.33+15+1533136590.3beb971-7, 1.36~1+deb10u1+15.4-5~deb10u1), libnettle6:amd64 (3.4.1-1, 3.4.1-1+deb10u1), libxml2:amd64 (2.9.4+dfsg1-7+deb10u1, 2.9.4+dfsg1-7+deb10u2), libmariadb3:amd64 (1:10.3.27-0+deb10u1, 1:10.3.29-0+deb10u1), libgnutls30:amd64 (3.6.7-4+deb10u6, 3.6.7-4+deb10u7), linux-kbuild-4.19:amd64 (4.19.181-1, 4.19.194-1), klibc-utils:amd64 (2.0.6-1, 2.0.6-1+deb10u1), libglib2.0-0:amd64 (2.58.3-2+deb10u2, 2.58.3-2+deb10u3), shim-signed-common:amd64 (1.33+15+1533136590.3beb971-7, 1.36~1+deb10u1+15.4-5~deb10u1), linux-cpupower:amd64 (4.19.181-1, 4.19.194-1), base-files:amd64 (10.3+deb10u9, 10.3+deb10u10)
End-Date: 2021-06-19  12:29:41


$ lxc-attach mar-mon1
lxc-attach: mar-mon1: lsm/lsm.c: lsm_process_label_set_at: 174 Operation not permitted - Failed to set AppArmor label "lxc-mar-mon1_</var/lib/lxc>//&:lxc-mar-mon1_<-var-lib-lxc>:unconfined"

The lxc-config file contains

lxc.apparmor.profile = generated
lxc.apparmor.allow_nesting = 1

The generated apparmor seems unchanged when I compare it to containers on a server I didn't reboot.
I did reboot 2 servers after this debian update, and both have this problem.


-- System Information:
Debian Release: 10.10
  APT prefers stable
  APT policy: (500, 'stable'), (90, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-17-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages lxc depends on:
ii  debconf [debconf-2.0]  1.5.71
ii  libc6                  2.28-10
ii  libcap2                1:2.25-2
ii  libgnutls30            3.6.7-4+deb10u7
ii  liblxc1                1:3.1.0+really3.0.3-8
ii  libseccomp2            2.3.3-4
ii  libselinux1            2.8-1+b1
ii  lsb-base               10.2019051400

Versions of packages lxc recommends:
ii  apparmor       2.13.2-10
ii  bridge-utils   1.6-2
pn  debootstrap    <none>
ii  dirmngr        2.2.12-1+deb10u1
pn  dnsmasq-base   <none>
ii  gnupg          2.2.12-1+deb10u1
ii  iproute2       4.20.0-2+deb10u1
ii  iptables       1.8.2-4
pn  libpam-cgfs    <none>
pn  lxc-templates  <none>
ii  lxcfs          3.0.3-2
ii  openssl        1.1.1d-0+deb10u6
pn  rsync          <none>
pn  uidmap         <none>

Versions of packages lxc suggests:
pn  btrfs-progs  <none>
pn  lvm2         <none>
pn  python3-lxc  <none>

--- End Message ---
--- Begin Message --- 
Source: linux
Source-Version: 4.19.194-2
Done: Salvatore Bonaccorso <carnil@debian.org>

We believe that the bug you reported is fixed in the latest version of
linux, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 990072@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Salvatore Bonaccorso <carnil@debian.org> (supplier of updated linux package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 21 Jun 2021 10:46:20 +0200
Source: linux
Architecture: source
Version: 4.19.194-2
Distribution: buster
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 990072
Changes:
 linux (4.19.194-2) buster; urgency=medium
 .
   * proc: Track /proc/$pid/attr/ opener mm_struct (Closes: #990072)
Checksums-Sha1:
 197a08de95c8661cdb7c14713b0a4fc165a41fb5 191615 linux_4.19.194-2.dsc
 eb08a00d3ed97ef32d59a46aa3c1224133764a6d 3377504 linux_4.19.194-2.debian.tar.xz
 1f61d4c822b5f77c75425eec1a786d9f864871e4 6228 linux_4.19.194-2_source.buildinfo
Checksums-Sha256:
 e759f51d7cc10c866bf795d051971bbbea7c2a886cc93c49a58ed1c1af0e5d69 191615 linux_4.19.194-2.dsc
 770c22a92b290c2e8a890ac601f3e5c4315c82caea23df1b8f52ddfba6a81d22 3377504 linux_4.19.194-2.debian.tar.xz
 f12f2297dc47c399b77df462cc1d15e4e5df63aed2aa6e0a92ddccba5ec10439 6228 linux_4.19.194-2_source.buildinfo
Files:
 61bf3b824d9a8bcffac3fb89dca7a9ae 191615 kernel optional linux_4.19.194-2.dsc
 f5b16a9030ba3519efd4b6f515cb1cef 3377504 kernel optional linux_4.19.194-2.debian.tar.xz
 4615001c65912a634283b5bfae1b872d 6228 kernel optional linux_4.19.194-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=PBMw
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: