>>> Completed installing monkeysphere-0.37 into /var/tmp/portage/app-crypt/monkeysphere-0.37/image/ ecompressdir: bzip2 -9 /usr/share/man ecompressdir: bzip2 -9 /usr/share/doc ms: setting up Monkeysphere authentication trust core... * ERROR: app-crypt/monkeysphere-0.37::gentoo failed (postinst phase): * (no error message) * * Call stack: * ebuild.sh, line 93: Called pkg_postinst * environment, line 2233: Called die $ cat ./info.txt ----------------------------------------------------------------- This is an unstable amd64 chroot image (named amd64-kde-unstable_20150820-150929) at a hardened host acting as a tinderbox. ----------------------------------------------------------------- Portage 2.2.20.1 (python 3.4.3-final-0, default/linux/amd64/13.0/desktop/kde, gcc-4.9.3, glibc-2.21-r1, 4.1.6-hardened x86_64) ================================================================= System uname: Linux-4.1.6-hardened-x86_64-Intel-R-_Core-TM-_i7-3770_CPU_@_3.40GHz-with-gentoo-2.2 KiB Mem: 16164628 total, 2676572 free KiB Swap: 0 total, 0 free Timestamp of repository gentoo: Sat, 05 Sep 2015 19:15:01 +0000 sh bash 4.3_p42 ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1 distcc 3.2rc1 x86_64-pc-linux-gnu [disabled] ccache version 3.2.3 [disabled] app-shells/bash: 4.3_p42::gentoo dev-java/java-config: 2.2.0::gentoo dev-lang/perl: 5.22.0::gentoo dev-lang/python: 2.7.10::gentoo, 3.4.3::gentoo dev-util/ccache: 3.2.3::gentoo dev-util/cmake: 3.3.1-r1::gentoo dev-util/pkgconfig: 0.28-r3::gentoo sys-apps/baselayout: 2.2::gentoo sys-apps/openrc: 0.17::gentoo sys-apps/sandbox: 2.6-r1::gentoo sys-devel/autoconf: 2.13::gentoo, 2.69-r1::gentoo sys-devel/automake: 1.9.6-r4::gentoo, 1.10.3-r1::gentoo, 1.11.6-r1::gentoo, 1.12.6::gentoo, 1.13.4::gentoo, 1.14.1::gentoo, 1.15::gentoo sys-devel/binutils: 2.25.1-r1::gentoo sys-devel/gcc: 4.2.4-r1::gentoo, 4.8.4::gentoo, 4.9.3::gentoo sys-devel/gcc-config: 1.8::gentoo sys-devel/libtool: 2.4.6-r1::gentoo sys-devel/make: 4.1-r1::gentoo sys-kernel/linux-headers: 4.2::gentoo (virtual/os-headers) sys-libs/glibc: 2.21-r1::gentoo Repositories: local location: /usr/local/portage masters: gentoo gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: 9999 ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /etc/stunnel/stunnel.conf /usr/share/config /usr/share/easy-rsa /usr/share/gnupg/qualified.txt /usr/share/themes/oxygen-gtk/gtk-2.0 /var/lib/hsqldb /var/lib/redmine/config /var/spool/torque /var/yp/Makefile" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /var/lib/redmine/config/locales /var/lib/redmine/config/settings.yml" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/var/tmp/distfiles" EMERGE_DEFAULT_OPTS="--color=n --nospinner --tree --quiet-build --accept-properties=-interactive --accept-restrict=-fetch" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync network-sandbox news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://ftp.uni-erlangen.de/pub/mirrors/gentoo rsync://mirror.netcologne.de/gentoo/ ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gor.bytemark.co.uk/gentoo/ rsync://ftp.snt.utwente.nl/gentoo" LANG="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j1" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" USE="X a52 aac acl acpi alsa amd64 berkdb bluetooth branding bzip2 cairo cdda cdr cli consolekit cracklib crypt cups cxx dbus declarative dri dts dvd dvdr emboss encode exif fam firefox flac fortran gdbm gif glamor gpm gtk iconv ipv6 jpeg kde kipi lcms ldap libnotify mad mmx mmxext mng modules mp3 mp4 mpeg multilib ncurses nls nptl ogg opengl openmp pam pango pcre pdf phonon plasma png policykit ppds qt3support qt4 readline sdl seccomp semantic-desktop session spell sse sse2 ssl startup-notification svg tcpd tiff truetype udev udisks unicode upower usb vorbis wxwidgets x264 xcb xcomposite xinerama xml xscreensaver xv xvid zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en en_GB" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby19 ruby20" USERLAND="GNU" VIDEO_CARDS="fbdev glint intel mach64 mga nouveau nv r128 radeon savage sis tdfx trident vesa via vmware dummy v4l" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
Created attachment 411086 [details] app-crypt:monkeysphere-0.37:20150905-194940.log
Created attachment 411088 [details] emerge-history.txt
What happens if you try to run "monkeysphere-authentication setup" directly in the commandline after an install?
(In reply to Kristian Fiskerstrand from comment #3) > What happens if you try to run "monkeysphere-authentication setup" directly > in the commandline after an install? tinderbox@tor-relay ~ $ sc volumes/amd64-kde-unstable_20150820-150929 tor-relay / # eix -I app-crypt/monkeysphere [I] app-crypt/monkeysphere Available versions: (~)0.36-r1^t (~)0.36-r2^t (~)0.37(0/0)^t {test} Installed versions: 0.37^t(09:49:49 PM 09/05/2015) Homepage: http://web.monkeysphere.info/ Description: Leverage the OpenPGP web of trust for OpenSSH and Web authentication tor-relay / # monkeysphere-authentication setup ms: setting up Monkeysphere authentication trust core... tor-relay / # exit logout
(In reply to Toralf Förster from comment #4) > (In reply to Kristian Fiskerstrand from comment #3) > > What happens if you try to run "monkeysphere-authentication setup" directly > > in the commandline after an install? > > tinderbox@tor-relay ~ $ sc volumes/amd64-kde-unstable_20150820-150929 > tor-relay / # eix -I app-crypt/monkeysphere > [I] app-crypt/monkeysphere > Available versions: (~)0.36-r1^t (~)0.36-r2^t (~)0.37(0/0)^t {test} > Installed versions: 0.37^t(09:49:49 PM 09/05/2015) > Homepage: http://web.monkeysphere.info/ > Description: Leverage the OpenPGP web of trust for OpenSSH and > Web authentication > > tor-relay / # monkeysphere-authentication setup > ms: setting up Monkeysphere authentication trust core... and the return code is 0 / SUCCESS? this is the only command that is run in postinst - I'm wondering if we're hitting some hardened-issue here..
(In reply to Kristian Fiskerstrand from comment #5) > and the return code is 0 / SUCCESS? now: yes : tinderbox@tor-relay ~ $ sc volumes/amd64-kde-unstable_20150820-150929 tor-relay / # monkeysphere-authentication setup tor-relay / # echo $? 0 tor-relay / # exit logout
(In reply to Toralf Förster from comment #6) > (In reply to Kristian Fiskerstrand from comment #5) > > > and the return code is 0 / SUCCESS? > > now: yes : > ok, the setup function is idempotent and can be run as often as we'd like, however are you still hitting the issue from the ebuild? And if you don't now, what about if you start from a clean slate by deleting /var/lib/monkeysphere. It would be interesting to try to get the return value from an unsuccessful run if you can still replicate it, and even better if you can set MONKEYSPHERE_LOG_LEVEL=debug env variable on an unsuccessful run.
great, the issue itself is not idempotent :-/ emerges now w/o problems after unmerging and cleaning of /var/lib/monkeysphere, setup works fine too: tor-relay / # monkeysphere-authentication setup ms: checking authentication directory structure... ms: writing core gpg.conf... ms: writing sphere gpg.conf... ms: fixing sphere gnupg home ownership... ms: determining core key fingerprint... ms: core fingerprint: 2E5605E693A137EDADCB64C62B399B4E7B11279C ms: Monkeysphere authentication trust core already exists. ms: exporting core pub key to sphere keyring... ms: setting ultimate owner trust on core key in gpg_sphere... ms: # List of assigned trustvalues, created Mon 14 Sep 2015 08:16:36 PM CEST ms: # (Use "gpg --import-ownertrust" to restore them) ms: 2E5605E693A137EDADCB64C62B399B4E7B11279C:6: ms: checking gpg_sphere owner trust set properly... ms: checking trust model for authentication ... ms: sphere trust model: 1:3:1 tor-relay / # echo $? 0 Damn - sry. So either I've seriously to consider if the underlying BTRFS file system of the tinderbox is stable enough (hardened kernel 4.1.6) - or some package of the 3800 packages between 5th of September end end of life time of this image (Sun Sep 13 03:10:45 2015) let the issue vanish - or ? FWIW: tor-relay monkeysphere # diff -r ./ /tmp/monkeysphere/ Only in /tmp/monkeysphere/authentication/core/private-keys-v1.d: 757C73090EA3762507AFA0C3DA91BB2F58426431.key Only in ./authentication/core/private-keys-v1.d: B326757C6E224D3C6E6A7788A8F5244C33C95200.key Binary files ./authentication/core/pubring.kbx and /tmp/monkeysphere/authentication/core/pubring.kbx differ Binary files ./authentication/core/pubring.kbx~ and /tmp/monkeysphere/authentication/core/pubring.kbx~ differ File ./authentication/core/S.gpg-agent is a socket while file /tmp/monkeysphere/authentication/core/S.gpg-agent is a socket Binary files ./authentication/core/trustdb.gpg and /tmp/monkeysphere/authentication/core/trustdb.gpg differ Binary files ./authentication/sphere/pubring.kbx and /tmp/monkeysphere/authentication/sphere/pubring.kbx differ Binary files ./authentication/sphere/pubring.kbx~ and /tmp/monkeysphere/authentication/sphere/pubring.kbx~ differ File ./authentication/sphere/S.gpg-agent is a socket while file /tmp/monkeysphere/authentication/sphere/S.gpg-agent is a socket Binary files ./authentication/sphere/trustdb.gpg and /tmp/monkeysphere/authentication/sphere/trustdb.gpg differ So - closing this as "a damn- 1-day-bug" ?
(In reply to Toralf Förster from comment #8) > great, the issue itself is not idempotent :-/ > > So - closing this as "a damn- 1-day-bug" ? Sounds like a plan to me :)
*** Bug 584942 has been marked as a duplicate of this bug. ***
*** Bug 579240 has been marked as a duplicate of this bug. ***
*** Bug 583612 has been marked as a duplicate of this bug. ***
