Thanks for your reply Russ. As mentioned in my previous email, I got the chroot environment working by manually copying over a number of _required_ libraries. Please note that "required libraries" in this context refers to libraries required by the chroot environment to work properly and not necessarily (only) the dependencies of the binaries passed to 'ldd' in the 'mkchroot.sh' script. So maybe the 'mkchroot.sh' script simply passes an an incomplete list of binaries to 'ldd'?
Would be great if the 'mkchroot.sh' script could copy _all_ required libraries into the chroot environment, hence produce a _working_ chroot environment (as it used to be on lenny). Unfortunately, I am unable to suggest or provide a fix since I don't fully understand why 'mkchroot.sh' or 'ldd' do not correctly detect _all_ required libraries on squeeze. I still believe it might have to do with the fact that ssh libraries are already loaded and cached when logging in remotely. Did you log in remotely via ssh to the systems you checked? > -----Original Message----- > From: Russ Allbery [mailto:r...@debian.org] > Sent: Tuesday, 22 February, 2011 13:16 > To: Erich Liebmann > Cc: 611...@bugs.debian.org > Subject: Re: Bug#611878: rssh mkchroot.sh sample script broken > > "Erich Liebmann" <erich.liebm...@gmx.net> writes: > > > After trying 'ldd' with other binaries I am not sure > whether, the fact > > that only 'libc' is reported as a shared library dependency > for 'scp' > > and 'sftp-server', is related to VDSO, to the way the 'scp' and > > 'sftp-server' binaries were created in the first place, or > some other > > factors. > > I'm fairly sure that scp and sftp-server themselves just > don't depend on > any libraries other than libc and the dynamic loader. Checking a few > different systems, they don't seem to. And there isn't any reason why > they should need to; they don't do any cryptography. That's > all done by > the ssh binary. > > > Interestingly even 'readelf' reports only the 'libc' > dependency for 'scp': > > > # readelf -d /usr/bin/scp | egrep NEEDED > > 0x0000000000000001 (NEEDED) Shared library: [libc.so.6] > > # > > That confirms that it definitely doesn't need other libraries. > > > I just know that on my old 'lenny' installation 'ldd' > reported shared > > library dependencies for 'scp' and 'sftp-server' corretly and > > 'mkchroot.sh' created a working chroot environment. For some unkown > > reason this does not seem to be the case any more on my new > 'squeeze' > > machine! > > What exactly doesn't work about the chroot environment? Maybe we're > chasing the wrong thing. > > > I doubt that 'scp' depends only on 'libc', at least on my > old 'lenny' > > installation it had several other dependencies, including > 'libcrypt' and > > 'libnsl'. > > I suspect this was a cleanup of the build system. > > I don't think there are any fixes required to mkchroot, at > least for those > particular binaries. There's probably some fix required for > *something* > you're running into, but I think the ldd output is a red > herring. If you > could provide more information about what doesn't work in the > chroot, that > would be helpful in finding whatever the actual issue is. > > -- > Russ Allbery (r...@debian.org) > <http://www.eyrie.org/~eagle/> > No virus found in this incoming message. > Checked by AVG - www.avg.com > Version: 9.0.872 / Virus Database: 271.1.1/3440 - Release > Date: 02/21/11 16:05:00 > -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org