Your message dated Tue, 03 Dec 2024 14:44:01 +0000
with message-id <e1tiu89-006kfl...@fasolo.debian.org>
and subject line Bug#1087918: fixed in needrestart 3.6-4+deb12u3
has caused the Debian Bug report #1087918,
regarding needrestart reports services need to be restarted after they are
restarted
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1087918: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1087918
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: needrestart
Version: 3.5-4+deb11u4
After updating from the previous version, 3.5-4+deb11u3, it now reports
that three services need to be restarted. It'll keep reporting this
regardless of the services being restarted or the machine rebooting. All
three are services for Ceph podman containers. The only containers
running on the machine. The expectation is that the warning will go away
after restarting services.
On Debian 11, Kernel 5.10.226-1
Note: This also occurred on Debian a 12 machine with a needrestart
upgrade of 3.6-4+deb12u1 to 3.6-4+deb12u2. Which makes me think it's
directly related to the recent code patch. I'm sending a separate email
with that bug report. Thanks!
-Mike
Example output
# needrestart -v -m a -r l
[main] eval /etc/needrestart/needrestart.conf
[main] needrestart v3.5
[main] running in root mode
[Core] Using UI 'NeedRestart::UI::stdio'...
[main] systemd detected
[Core] #892 is a NeedRestart::Interp::Perl
[Perl] #892: source=/usr/sbin/munin-node
[main] #92912 uses obsolete binary /usr/libexec/platform-python3.6
[main] #92912 is a child of #92856
[main] #92928 uses obsolete binary /bin/node_exporter
[main] #92928 is a child of #92884
[main] #93022 uses obsolete binary /usr/bin/ceph-mon
[main] #93022 is a child of #93000
[main] #92856 exe => /dev/init
[main] #92856 unexpected cgroup
'/system.slice/system-ceph\x2d0113e5fa\x2dc835\x2d11ed\x2d9b3d\x2dfbe4e4a9a9eb.slice/ceph-0113e5fa-c835-11ed-9b3d-fbe4e4a9a9eb@crash.cmon02.service/container'
[main] trying systemctl status
[main] #92856 is ceph-0113e5fa-c835-11ed-9b3d-fbe4e4a9a9eb@crash.cmon02.service
[main] #92884 exe => /dev/init
[main] #92884 unexpected cgroup
'/system.slice/system-ceph\x2d0113e5fa\x2dc835\x2d11ed\x2d9b3d\x2dfbe4e4a9a9eb.slice/ceph-0113e5fa-c835-11ed-9b3d-fbe4e4a9a9eb@node-exporter.cmon02.service/container'
[main] trying systemctl status
[main] #92884 is
ceph-0113e5fa-c835-11ed-9b3d-fbe4e4a9a9eb@node-exporter.cmon02.service
[main] #93000 exe => /dev/init
[main] #93000 unexpected cgroup
'/system.slice/system-ceph\x2d0113e5fa\x2dc835\x2d11ed\x2d9b3d\x2dfbe4e4a9a9eb.slice/ceph-0113e5fa-c835-11ed-9b3d-fbe4e4a9a9eb@mon.cmon02.service/container'
[main] trying systemctl status
[main] #93000 is ceph-0113e5fa-c835-11ed-9b3d-fbe4e4a9a9eb@mon.cmon02.service
[ucode] using NeedRestart::uCode::Intel
[ucode] using NeedRestart::uCode::AMD
[uCode/Intel] #0 current revision: 0x5003707
+ iucode_tool --scan-system
+ grep -oE [^[:space:]]+$
+ sig=0x00050657
+ [ -r /sys/devices/system/cpu/cpu0/microcode/processor_flags ]
+ cat /sys/devices/system/cpu/cpu0/microcode/processor_flags
+ filter=-s 0x00050657,0x1
+ test -r /etc/needrestart/iucode.sh
+ . /etc/needrestart/iucode.sh
+ type bsdtar
+ IUCODE_TOOL_EXTRA_OPTIONS=
+ test -r /etc/default/intel-microcode
+ . /etc/default/intel-microcode
+ test = no
+ [ -r /usr/share/misc/intel-microcode* ]
+ iucode_tool -l -s 0x00050657,0x1 --ignore-broken -tb /lib/firmware/intel-ucode
+ grep 0x00050657
[uCode/Intel] #0 available revision: 0x5003707
[uCode/AMD] #0 cpu vendor id mismatch
[Kernel] Linux: kernel release 5.10.0-33-amd64, kernel version #1 SMP Debian
5.10.226-1 (2024-10-03)
[Kernel/Linux] /boot/vmlinuz-5.10.0-33-amd64 => 5.10.0-33-amd64
(debian-ker...@lists.debian.org) #1 SMP Debian 5.10.226-1 (2024-10-03)
[5.10.0-33-amd64]*
[Kernel/Linux] /boot/vmlinuz-5.10.0-32-amd64 => 5.10.0-32-amd64
(debian-ker...@lists.debian.org) #1 SMP Debian 5.10.223-1 (2024-08-10)
[5.10.0-32-amd64]
[Kernel/Linux] Expected linux version: 5.10.0-33-amd64
Running kernel seems to be up-to-date.
The processor microcode seems to be up-to-date.
Services to be restarted:
systemctl restart
ceph-0113e5fa-c835-11ed-9b3d-fbe4e4a9a9eb@crash.cmon02.service
systemctl restart ceph-0113e5fa-c835-11ed-9b3d-fbe4e4a9a9eb@mon.cmon02.service
systemctl restart
ceph-0113e5fa-c835-11ed-9b3d-fbe4e4a9a9eb@node-exporter.cmon02.service
No containers need to be restarted.
No user sessions are running outdated binaries.
--
Michael Baer
Systems Engineer/Ops/Software
DNS Operations, Analysis, and Research Center
m...@dns-oarc.net
C: 530.902.3131
--- End Message ---
--- Begin Message ---
Source: needrestart
Source-Version: 3.6-4+deb12u3
Done: Salvatore Bonaccorso <car...@debian.org>
We believe that the bug you reported is fixed in the latest version of
needrestart, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1087...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <car...@debian.org> (supplier of updated needrestart
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 02 Dec 2024 20:52:03 +0100
Source: needrestart
Architecture: source
Version: 3.6-4+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: Patrick Matthäi <pmatth...@debian.org>
Changed-By: Salvatore Bonaccorso <car...@debian.org>
Closes: 1087917 1087918 1087957 1087958 1088012 1088047
Changes:
needrestart (3.6-4+deb12u3) bookworm-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* core: fix regression of false positives for processes running in chroot or
mountns (Closes: #1087918, #1088047, #1088012, #1087917, #1087958,
#1087957)
Checksums-Sha1:
d24c4364bb8a3451e5e33c28572bb7afca605726 2007 needrestart_3.6-4+deb12u3.dsc
34c7b6f22b04a0861eadef0e563aacca02cd7cbd 15952
needrestart_3.6-4+deb12u3.debian.tar.xz
Checksums-Sha256:
fb14a954e5d64c0e3789d172efd1320275277332a85809c9304e203adf70f3f3 2007
needrestart_3.6-4+deb12u3.dsc
406b9f8e020f8a181cfc2087dfdf01dc858bbac7bd9ea44e57351054e25592db 15952
needrestart_3.6-4+deb12u3.debian.tar.xz
Files:
e4dbddf5ffec42f6a111fab41b469152 2007 admin optional
needrestart_3.6-4+deb12u3.dsc
426ffbbbc4c7c6d3f0b6cffe8d8efde4 15952 admin optional
needrestart_3.6-4+deb12u3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=aEla
-----END PGP SIGNATURE-----
pgpwRPmeDKeCr.pgp
Description: PGP signature
--- End Message ---
