MAAS

[2.2b5] ntp test failed: can't find ntpq

Bug #1677336 reported by Jason Hobbs
14
This bug affects 3 people
Affects Status Importance Assigned to Milestone
MAAS
Fix Released
Critical
Andres Rodriguez
MAAS 2.2.0rc2

Bug Description

I tried to run the ntp test on my node but it failed with this error:

/tmp/user_data.sh.q0nDDL/scripts/testing/ntp: 26: /tmp/user_data.sh.q0nDDL/scripts/testing/ntp: ntpq: not found

This is with 2.2beta5

Tags: oil oil-2.0

Related branches

lp://staging/~andreserl/maas/lp1677336
Blake Rouse (community): Approve
Diff: 44 lines (+23/-0)
2 files modified
src/provisioningserver/kernel_opts.py (+3/-0)
src/provisioningserver/tests/test_kernel_opts.py (+20/-0)
Andres Rodriguez (andreserl)
Changed in maas:
milestone: none → 2.2.0
importance: Undecided → Critical
status: New → Triaged
Andres Rodriguez (andreserl)
summary: - ntp test failed: can't find ntpq
+ [2.2b5] ntp test failed: can't find ntpq
Andres Rodriguez (andreserl)
Changed in maas:
milestone: 2.2.0 → 2.2.0rc1
Revision history for this message
Mike Pontillo (mpontillo) wrote :

I saw this once as well, but couldn't reproduce the issue.

Revision history for this message
Lee Trager (ltrager) wrote :

This bug manifests itself a bit differently for me. ntpd is found but I get permission denied on libcap.so.2 and then ntp fails to start back up again.

+ sudo -n timeout 10 ntpd -gq
ntpd: error while loading shared libraries: libcap.so.2: cannot stat shared object: Permission denied
+ e=127
+ sudo -n systemctl start ntp.service
Job for ntp.service failed because the control process exited with error code. See "systemctl status ntp.service" and "journalctl -xe" for details.

Revision history for this message
Lee Trager (ltrager) wrote :

This appears to be due to apparmor

[ 49.115951] audit: type=1400 audit(1491266937.561:15): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/ntpd" pid=2153 comm="apparmor_parser"
[ 49.156571] systemd[1]: apt-daily.timer: Adding 4h 41min 45.232716s random time.
[ 53.152097] audit: type=1400 audit(1491266941.956:16): apparmor="DENIED" operation="getattr" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/ntpd" name="overlay/etc/ld.so.cache" pid=2484 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[ 53.152161] audit: type=1400 audit(1491266941.956:17): apparmor="DENIED" operation="getattr" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/ntpd" name="lib/x86_64-linux-gnu/libcap.so.2.24" pid=2484 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[ 53.163246] audit: type=1400 audit(1491266941.964:18): apparmor="DENIED" operation="getattr" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/ntpd" name="overlay/etc/ld.so.cache" pid=2496 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[ 53.163313] audit: type=1400 audit(1491266941.964:19): apparmor="DENIED" operation="getattr" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/ntpd" name="lib/x86_64-linux-gnu/libcap.so.2.24" pid=2496 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

Revision history for this message
LaMont Jones (lamont) wrote :

See https://bugs.launchpad.net/maas/+bug/1408106 -- apparmor and overlayfs do not play well together.

Andres Rodriguez (andreserl)
Changed in maas:
milestone: 2.2.0rc1 → 2.2.0rc2
Andres Rodriguez (andreserl)
Changed in maas:
assignee: nobody → Andres Rodriguez (andreserl)
status: Triaged → In Progress
MAAS Lander (maas-lander)
Changed in maas:
status: In Progress → Fix Committed
Andres Rodriguez (andreserl)
Changed in maas:
status: Fix Committed → Fix Released
Revision history for this message
Frode Nordahl (fnordahl) wrote :

This issue is hitting users of MAAS versions prior to 2.2 as well. Is this fix subject for backport?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.