Package: ifupdown
Version: 0.8.5
Severity: critical
Justification: breaks unrelated software
Hi Guus.
I've just upgraded from 0.7.54 to 0.8.5 and after rebooting the server,
all kinds of daemons didn't come up anmore, e.g.
BIND:
# systemctl status bind9.service -ln 10000
● bind9.service - BIND Domain Name Server
Loaded: loaded (/lib/systemd/system/bind9.service; enabled; vendor preset:
enabled)
Drop-In: /run/systemd/generator/bind9.service.d
└─50-insserv.conf-$named.conf
Active: failed (Result: exit-code) since Sun 2016-01-03 22:31:51 CET; 10min
ago
Docs: man:named(8)
Process: 1166 ExecStop=/usr/sbin/rndc stop (code=exited, status=1/FAILURE)
Process: 956 ExecStart=/usr/sbin/named -f -u bind (code=exited,
status=1/FAILURE)
Main PID: 956 (code=exited, status=1/FAILURE)
Jan 03 22:31:48 kronecker systemd[1]: Started BIND Domain Name Server.
Jan 03 22:31:50 kronecker named[956]: starting BIND 9.9.5-12.1-Debian -f -u bind
Jan 03 22:31:50 kronecker named[956]: built with '--prefix=/usr'
'--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind'
'--localstatedir=/var' '--enable-threads' '--enable-largefile' '--with-libtool'
'--enable-shared' '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr'
'--with-gnu-ld' '--with-geoip=/usr' '--with-atf=no' '--enable-ipv6'
'--enable-rrl' '--enable-filter-aaaa' 'CFLAGS=-fno-strict-aliasing
-fno-delete-null-pointer-checks -DDIG_SIGCHASE -O2'
Jan 03 22:31:50 kronecker named[956]:
----------------------------------------------------
Jan 03 22:31:50 kronecker named[956]: BIND 9 is maintained by Internet Systems
Consortium,
Jan 03 22:31:50 kronecker named[956]: Inc. (ISC), a non-profit 501(c)(3)
public-benefit
Jan 03 22:31:50 kronecker named[956]: corporation. Support and training for
BIND 9 are
Jan 03 22:31:50 kronecker named[956]: available at https://www.isc.org/support
Jan 03 22:31:50 kronecker named[956]:
----------------------------------------------------
Jan 03 22:31:50 kronecker named[956]: adjusted limit on open files from 4096 to
1048576
Jan 03 22:31:50 kronecker named[956]: found 2 CPUs, using 2 worker threads
Jan 03 22:31:50 kronecker named[956]: using 2 UDP listeners per interface
Jan 03 22:31:50 kronecker named[956]: using up to 4096 sockets
Jan 03 22:31:50 kronecker named[956]: loading configuration from
'/etc/bind/named.conf'
Jan 03 22:31:50 kronecker named[956]: reading built-in trusted keys from file
'/etc/bind/bind.keys'
Jan 03 22:31:50 kronecker named[956]: using default UDP/IPv4 port range: [1024,
65535]
Jan 03 22:31:50 kronecker named[956]: using default UDP/IPv6 port range: [1024,
65535]
Jan 03 22:31:50 kronecker named[956]: listening on IPv4 interface lo,
127.0.0.1#53
Jan 03 22:31:50 kronecker named[956]: listening on IPv6 interface lo, ::1#53
Jan 03 22:31:50 kronecker named[956]: generating session key for dynamic DNS
Jan 03 22:31:50 kronecker named[956]: sizing zone task pool based on 45 zones
Jan 03 22:31:50 kronecker named[956]: acache 0x7f80f01535d0 cleaning interval
set to 3600.
Jan 03 22:31:50 kronecker named[956]: could not get query source dispatcher
(1.2.3.199#0)
Jan 03 22:31:50 kronecker named[956]: loading configuration: address not
available
Jan 03 22:31:50 kronecker named[956]: exiting (due to fatal error)
Jan 03 22:31:50 kronecker systemd[1]: bind9.service: Main process exited,
code=exited, status=1/FAILURE
Jan 03 22:31:51 kronecker rndc[1166]: rndc: connect failed: 127.0.0.1#49153:
connection refused
Jan 03 22:31:51 kronecker systemd[1]: bind9.service: Control process exited,
code=exited status=1
Jan 03 22:31:51 kronecker systemd[1]: bind9.service: Unit entered failed state.
Jan 03 22:31:51 kronecker systemd[1]: bind9.service: Failed with result
'exit-code'.
=> seems as if even lo wouldn't be ready at that point in time?!
Apache HTTP:
# systemctl status apache2.service -ln 10000
● apache2.service - LSB: Start/stop apache2 web server
Loaded: loaded (/etc/init.d/apache2; bad; vendor preset: enabled)
Active: failed (Result: exit-code) since Sun 2016-01-03 22:31:53 CET; 10min
ago
Docs: man:systemd-sysv-generator(8)
Process: 961 ExecStart=/etc/init.d/apache2 start (code=exited,
status=1/FAILURE)
Jan 03 22:31:48 kronecker systemd[1]: Starting LSB: Start/stop apache2 web
server...
Jan 03 22:31:53 kronecker apache2[961]: Starting web server: apache2(99)Cannot
assign requested address: make_sock: could not bind to address 1.2.3.199:11371
Jan 03 22:31:53 kronecker apache2[961]: no listening sockets available,
shutting down
Jan 03 22:31:53 kronecker apache2[961]: Unable to open logs
Jan 03 22:31:53 kronecker apache2[961]: Action 'start' failed.
Jan 03 22:31:53 kronecker apache2[961]: The Apache error log may have more
information.
Jan 03 22:31:53 kronecker apache2[961]: failed!
Jan 03 22:31:53 kronecker systemd[1]: apache2.service: Control process exited,
code=exited status=1
Jan 03 22:31:53 kronecker systemd[1]: Failed to start LSB: Start/stop apache2
web server.
Jan 03 22:31:53 kronecker systemd[1]: apache2.service: Unit entered failed
state.
Jan 03 22:31:53 kronecker systemd[1]: apache2.service: Failed with result
'exit-code'.
=> ifaces not yet there
SKS:
starts up partially (one of the two daemon processes):
# systemctl status sks.service -ln 10000
● sks.service
Loaded: loaded (/etc/init.d/sks; bad; vendor preset: enabled)
Active: active (running) since Sun 2016-01-03 22:31:48 CET; 11min ago
Docs: man:systemd-sysv-generator(8)
Process: 839 ExecStart=/etc/init.d/sks start (code=exited, status=0/SUCCESS)
CGroup: /system.slice/sks.service
└─946 /usr/sbin/sks db
Jan 03 22:31:46 kronecker systemd[1]: Starting sks.service...
Jan 03 22:31:48 kronecker sks[839]: Starting sks daemons: sksdb.. sksrecon..
done.
Jan 03 22:31:48 kronecker systemd[1]: Started sks.service.
Jan 03 22:31:48 kronecker sks[839]: 2016-01-03 22:31:48 Failed to listen on
1.2.3.199:11370: Failure("Failure while binding socket. Probably another
socket bound to this address")
Jan 03 22:31:48 kronecker sks[839]: 2016-01-03 22:31:48 Failed to listen on
A:B:C:D::2:2:11370: Failure("Failure while binding socket. Probably another
socket bound to this address")
Jan 03 22:31:48 kronecker sks[839]: Fatal error: exception Failure("Could not
listen on any address.")
=> so unfortunately we have another case here, where systemd tells all ok
but in fact it's not
Some other daemons running on that host came up properly, so I guess that
there is some timing issue.
Once I can log in to the system (i.e. boot complete) all ifaces and
all their addresses are brought up correctly (by then).
In fact, I remember we already had once such an issue for quite a while:
#766943
Attached is my /e/n/interfaces, with addresses concealed for privacy reasons
(as above).
Any ideas?
Cheers,
Chris.
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.3.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_DE.UTF-8, LC_CTYPE=en_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages ifupdown depends on:
ii adduser 3.113+nmu3
ii init-system-helpers 1.24
ii iproute2 4.3.0-1
ii libc6 2.21-6
ii lsb-base 9.20150917
Versions of packages ifupdown recommends:
ii isc-dhcp-client [dhcp-client] 4.3.3-5
Versions of packages ifupdown suggests:
ii ppp 2.4.7-1+1
pn rdnssd <none>
-- debconf information:
ifupdown/convert-interfaces: true
allow-auto lo
allow-hotplug eth0
#*******************************************************************************
#*** Loopback Network Interface – lo ***
#*******************************************************************************
iface lo inet loopback
dns-search foo.bar
#*******************************************************************************
#*** Ethernet Network Interface – eth0 ***
#*******************************************************************************
iface eth0 inet static
address 1.2.3.199
netmask 255.255.255.224
gateway 1.2.3.193
#fallback DNS-servers for the local DNS-server
#Warning: Only use DNS-servers that are fully trusted and to which a
secure connection (for example via IPsec) is guaranteed!
#TODO:#dns-nameserver X.X.X.X
iface eth0 inet static
address 1.2.3.204
netmask 255.255.255.224
iface eth0 inet static
address 1.2.3.211
netmask 255.255.255.224
iface eth0 inet static
address 1.2.3.214
netmask 255.255.255.224
iface eth0 inet6 static
address A:B:C:D::1:0
netmask 64
gateway fe80::1
#fallback DNS-servers for the local DNS-server
#Warning: Only use DNS-servers that are fully trusted and to which a
secure connection (for example via IPsec) is guaranteed!
#TODO:#dns-nameserver X::
iface eth0 inet6 static
address A:B:C:D::2:0
netmask 64
preferred-lifetime 0
iface eth0 inet6 static
address A:B:C:D::2:2
netmask 64
preferred-lifetime 0
iface eth0 inet6 static
address A:B:C:D::2:3
netmask 64
preferred-lifetime 0
iface eth0 inet6 static
address A:B:C:D::A:0
netmask 64
preferred-lifetime 0
iface eth0 inet6 static
address A:B:C:D::B:0
netmask 64
preferred-lifetime 0
iface eth0 inet6 static
address A:B:C:D::C:0
netmask 64
preferred-lifetime 0
iface eth0 inet6 static
address A:B:C:D::C:1000
netmask 64
preferred-lifetime 0
