Debian Bug report logs - #806406
1.1 regression: apt-get hangs forever, due to missing "_apt" user

version graph

Package: apt; Maintainer for apt is APT Development Team <deity@lists.debian.org>; Source for apt is src:apt (PTS, buildd, popcon).

Reported by: Martin Pitt <mpitt@debian.org>

Date: Fri, 27 Nov 2015 08:30:02 UTC

Severity: important

Found in version apt/1.1

Fixed in version apt/1.1.1

Done: Michael Vogt <mvo@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, APT Development Team <deity@lists.debian.org>:
Bug#806406; Package apt. (Fri, 27 Nov 2015 08:30:06 GMT) (full text, mbox, link).


Acknowledgement sent to Martin Pitt <mpitt@debian.org>:
New Bug report received and forwarded. Copy sent to APT Development Team <deity@lists.debian.org>. (Fri, 27 Nov 2015 08:30:06 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Martin Pitt <mpitt@debian.org>
To: Debian BTS Submit <submit@bugs.debian.org>
Subject: 1.1 regression: apt-get hangs forever, due to missing "_apt" user
Date: Fri, 27 Nov 2015 09:27:05 +0100
[Message part 1 (text/plain, inline)]
Package: apt
Version: 1.1
Severity: grave

Hello,

after dist-upgrading my sid schroot today, apt-get hangs forever. I
suspected some local schroot breakage, so I wiped it and tried to
rebuild one, but "mk-sbuild sid" hangs there too when it did the
initial bootstrap and runs "apt-get update" in the schroot. Killing
them, trying to chroot into the half-created env myself and running
with debugging gives the output below.

Dist-upgrading a jessie schroot to sid works on the other hand.

Michael figured out that this is because apt expects the "_apt" system
user. This isn't present in a fresh debootstrap, and also gets wiped
with schroot as that usually copies /etc/passwd and friends from the
host (which does not have the _apt user).

For a critical package like apt which is part of deboostrap it's
generally not a good idea to rely on a dynamic system user. Please try
to avoid the _apt user altogether -- it cannot be relied upon and also
looks a bit like clutter. If you want to run http with reduced
privileges, could you use an existing static user, like "sys" or
"daemon"?

Thanks!

Martin

apt-get update debug output:

$ sudo chroot /srv/schroot/sid-amd64/
(sid-amd64)root@donald:/# cat /etc/apt/apt.conf.d/
01autoremove          01autoremove-kernels  70debconf             
(sid-amd64)root@donald:/# apt-get update
0% [Working]^C
(sid-amd64)root@donald:/# apt-get update -o Debug::acquire::http=1 -o Debug::pkgAcquire::worker=1
Starting method '/usr/lib/apt/methods/http'
 <- http:100%20Capabilities%0aVersion:%201.2%0aPipeline:%20true%0aSend-Config:%20true
Configured access method http
Version:1.2 SingleInstance:0 Pipeline:1 SendConfig:1 LocalOnly: 0 NeedsCleanup: 0 Removable: 0
Starting method '/usr/lib/apt/methods/http'
 <- http:100%20Capabilities%0aVersion:%201.2%0aPipeline:%20true%0aSend-Config:%20true
Configured access method http
Version:1.2 SingleInstance:0 Pipeline:1 SendConfig:1 LocalOnly: 0 NeedsCleanup: 0 Removable: 0
 -> http:601%20Configuration%0aConfig-Item:%20APT::Architecture=amd64%0aConfig-Item:%20APT::Build-Essential::=build-essential%0aConfig-Item:%20APT::Install-Recommends=1%0aConfig-Item:%20APT::Install-Suggests=0%0aConfig-Item:%20APT::Sandbox::User=_apt%0aConfig-Item:%20APT::NeverAutoRemove::=^firmware-linux.*%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-firmware$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-headers-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-image-extra-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-signed-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^kfreebsd-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^kfreebsd-headers-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^gnumach-image-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^.*-modules-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^.*-kernel-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-backports-modules-.*-4\.2\.0-19-generic$%0aConfig-Item:%20APT::NeverAutoRemove::=^linux-tools-4\.2\.0-19-generic$%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-image%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-headers%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-image-extra%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-signed-image%0aConfig-Item:%20APT::VersionedKernelPackages::=kfreebsd-image%0aConfig-Item:%20APT::VersionedKernelPackages::=kfreebsd-headers%0aConfig-Item:%20APT::VersionedKernelPackages::=gnumach-image%0aConfig-Item:%20APT::VersionedKernelPackages::=.*-modules%0aConfig-Item:%20APT::VersionedKernelPackages::=.*-kernel%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-backports-modules-.*%0aConfig-Item:%20APT::VersionedKernelPackages::=linux-tools%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=contrib/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=non-free/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=restricted/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=universe/metapackages%0aConfig-Item:%20APT::Never-MarkAuto-Sections::=multiverse/metapackages%0aConfig-Item:%20APT::Move-Autobit-Sections::=oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=contrib/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=non-free/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=restricted/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=universe/oldlibs%0aConfig-Item:%20APT::Move-Autobit-Sections::=multiverse/oldlibs%0aConfig-Item:%20APT::Color::Highlight=%251b[32m%0aConfig-Item:%20APT::Color::Neutral=%251b[0m%0aConfig-Item:%20APT::Color::Red=%251b[31m%0aConfig-Item:%20APT::Color::Green=%251b[32m%0aConfig-Item:%20APT::Color::Yellow=%251b[33m%0aConfig-Item:%20APT::Color::Blue=%251b[34m%0aConfig-Item:%20APT::Color::Magenta=%251b[35m%0aConfig-Item:%20APT::Color::Cyan=%251b[36m%0aConfig-Item:%20APT::Color::White=%251b[37m%0aConfig-Item:%20APT::Compressor::lzma::Binary=xz%0aConfig-Item:%20APT::Compressor::lzma::CompressArg::=--format%253dlzma%0aConfig-Item:%20APT::Compressor::lzma::CompressArg::=-9%0aConfig-Item:%20APT::Compressor::lzma::UncompressArg::=--format%253dlzma%0aConfig-Item:%20APT::Compressor::lzma::UncompressArg::=-d%0aConfig-Item:%20Dir=/%0aConfig-Item:%20Dir::State=var/lib/apt/%0aConfig-Item:%20Dir::State::lists=lists/%0aConfig-Item:%20Dir::State::cdroms=cdroms.list%0aConfig-Item:%20Dir::State::mirrors=mirrors/%0aConfig-Item:%20Dir::State::extended_states=extended_states%0aConfig-Item:%20Dir::State::status=/var/lib/dpkg/status%0aConfig-Item:%20Dir::Cache=var/cache/apt/%0aConfig-Item:%20Dir::Cache::archives=archives/%0aConfig-Item:%20Dir::Cache::srcpkgcache=srcpkgcache.bin%0aConfig-Item:%20Dir::Cache::pkgcache=pkgcache.bin%0aConfig-Item:%20Dir::Etc=etc/apt/%0aConfig-Item:%20Dir::Etc::sourcelist=sources.list%0aConfig-Item:%20Dir::Etc::sourceparts=sources.list.d%0aConfig-Item:%20Dir::Etc::main=apt.conf%0aConfig-Item:%20Dir::Etc::netrc=auth.conf%0aConfig-Item:%20Dir::Etc::parts=apt.conf.d%0aConfig-Item:%20Dir::Etc::preferences=preferences%0aConfig-Item:%20Dir::Etc::preferencesparts=preferences.d%0aConfig-Item:%20Dir::Etc::trusted=trusted.gpg%0aConfig-Item:%20Dir::Etc::trustedparts=trusted.gpg.d%0aConfig-Item:%20Dir::Bin::methods=/usr/lib/apt/methods%0aConfig-Item:%20Dir::Bin::solvers::=/usr/lib/apt/solvers%0aConfig-Item:%20Dir::Bin::dpkg=/usr/bin/dpkg%0aConfig-Item:%20Dir::Bin::bzip2=/bin/bzip2%0aConfig-Item:%20Dir::Bin::xz=/usr/bin/xz%0aConfig-Item:%20Dir::Bin::lzma=/usr/bin/xz%0aConfig-Item:%20Dir::Media::MountPath=/media/apt%0aConfig-Item:%20Dir::Log=var/log/apt%0aConfig-Item:%20Dir::Log::Terminal=term.log%0aConfig-Item:%20Dir::Log::History=history.log%0aConfig-Item:%20Dir::Ignore-Files-Silently::=~$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.disabled$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.bak$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.dpkg-[a-z]+$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.save$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.orig$%0aConfig-Item:%20Dir::Ignore-Files-Silently::=\.distUpgrade$%0aConfig-Item:%20Acquire::AllowInsecureRepositories=1%0aConfig-Item:%20Acquire::AllowDowngradeToInsecureRepositories=0%0aConfig-Item:%20Acquire::cdrom::mount=/media/cdrom/%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::MetaKey=$(COMPONENT)/binary-$(ARCHITECTURE)/Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::flatMetaKey=Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::ShortDescription=Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::Description=$(RELEASE)/$(COMPONENT)%2520$(ARCHITECTURE)%2520Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::flatDescription=$(RELEASE)%2520Packages%0aConfig-Item:%20Acquire::IndexTargets::deb::Packages::Optional=0%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::MetaKey=$(COMPONENT)/i18n/Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::flatMetaKey=$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::ShortDescription=Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::Description=$(RELEASE)/$(COMPONENT)%2520Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb::Translations::flatDescription=$(RELEASE)%2520Translation-$(LANGUAGE)%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::MetaKey=$(COMPONENT)/source/Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::flatMetaKey=Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::ShortDescription=Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::Description=$(RELEASE)/$(COMPONENT)%2520Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::flatDescription=$(RELEASE)%2520Sources%0aConfig-Item:%20Acquire::IndexTargets::deb-src::Sources::Optional=0%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Debian=http://metadata.ftp-master.debian.org/changelogs/CHANGEPATH_changelog%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Tanglu=http://metadata.tanglu.org/changelogs/CHANGEPATH_changelog%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Ubuntu=http://changelogs.ubuntu.com/changelogs/pool/CHANGEPATH/changelog%0aConfig-Item:%20Acquire::Changelogs::URI::Origin::Ultimedia=http://packages.ultimediaos.com/changelogs/pool/CHANGEPATH/changelog.txt%0aConfig-Item:%20Acquire::CompressionTypes::xz=xz%0aConfig-Item:%20Acquire::CompressionTypes::bz2=bzip2%0aConfig-Item:%20Acquire::CompressionTypes::lzma=lzma%0aConfig-Item:%20Acquire::CompressionTypes::gz=gzip%0aConfig-Item:%20DPkg::Pre-Install-Pkgs::=/usr/sbin/dpkg-preconfigure%2520--apt%2520||%2520true%0aConfig-Item:%20Binary=apt-get%0aConfig-Item:%20Debug::acquire::http=1%0aConfig-Item:%20Debug::pkgAcquire::worker=1%0aConfig-Item:%20CommandLine::AsString=apt-get%2520update%2520-o%2520Debug::acquire::http%253d1%2520-o%2520Debug::pkgAcquire::worker%253d1%0a%0a
 -> http:600%20URI%20Acquire%0aURI:%20http://httpredir.debian.org/debian/dists/sid/InRelease%0aFilename:%20/var/lib/apt/lists/partial/httpredir.debian.org_debian_dists_sid_InRelease%0aIndex-File:%20true%0aMaximum-Size:%2010000000%0aFail-Ignore:%20true%0a%0a
0% [Working] <- http:400%20URI%20Failure%0aURI:%20<UNKNOWN>%0aMessage:%20No%20user%20_apt,%20can%20not%20drop%20rights
0% [Working]


-- 
Martin Pitt                        | http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, APT Development Team <deity@lists.debian.org>:
Bug#806406; Package apt. (Fri, 27 Nov 2015 10:57:08 GMT) (full text, mbox, link).


Acknowledgement sent to Julian Andres Klode <jak@debian.org>:
Extra info received and forwarded to list. Copy sent to APT Development Team <deity@lists.debian.org>. (Fri, 27 Nov 2015 10:57:08 GMT) (full text, mbox, link).


Message #10 received at 806406@bugs.debian.org (full text, mbox, reply):

From: Julian Andres Klode <jak@debian.org>
To: Martin Pitt <mpitt@debian.org>, 806406@bugs.debian.org
Subject: Re: Bug#806406: 1.1 regression: apt-get hangs forever, due to missing "_apt" user
Date: Fri, 27 Nov 2015 11:56:03 +0100
Control: severity -1 important

On Fri, Nov 27, 2015 at 09:27:05AM +0100, Martin Pitt wrote:
> Package: apt
> Version: 1.1
> Severity: grave
> 
> Hello,
> 
> after dist-upgrading my sid schroot today, apt-get hangs forever. I
> suspected some local schroot breakage, so I wiped it and tried to
> rebuild one, but "mk-sbuild sid" hangs there too when it did the
> initial bootstrap and runs "apt-get update" in the schroot. Killing
> them, trying to chroot into the half-created env myself and running
> with debugging gives the output below.
> 
> Dist-upgrading a jessie schroot to sid works on the other hand.
> 
> Michael figured out that this is because apt expects the "_apt" system
> user. This isn't present in a fresh debootstrap, and also gets wiped
> with schroot as that usually copies /etc/passwd and friends from the
> host (which does not have the _apt user).

Why is it not present in a fresh debootstrap? APT is not essential,
so it is not supposed to be run without its postinst being run
first.

And in fact, I just did a debootstrap of sid, and everything
worked fine, and the _apt user was created as it should be.

Maybe sbuild is doing something messed up.

> 
> For a critical package like apt which is part of deboostrap it's
> generally not a good idea to rely on a dynamic system user. Please try
> to avoid the _apt user altogether -- it cannot be relied upon and also
> looks a bit like clutter. If you want to run http with reduced
> privileges, could you use an existing static user, like "sys" or
> "daemon"?

The _apt user actually owns the partial directory and the files
below it. We cannot do this safely with a static user.


-- 
Julian Andres Klode  - Debian Developer, Ubuntu Member

See http://wiki.debian.org/JulianAndresKlode and http://jak-linux.org/.

When replying, only quote what is necessary, and write each reply
directly below the part(s) it pertains to (`inline'). Thank you.



Severity set to 'important' from 'grave' Request was from Julian Andres Klode <jak@debian.org> to 806406-submit@bugs.debian.org. (Fri, 27 Nov 2015 10:57:08 GMT) (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, APT Development Team <deity@lists.debian.org>:
Bug#806406; Package apt. (Fri, 27 Nov 2015 11:24:03 GMT) (full text, mbox, link).


Acknowledgement sent to Iain Lane <laney@debian.org>:
Extra info received and forwarded to list. Copy sent to APT Development Team <deity@lists.debian.org>. (Fri, 27 Nov 2015 11:24:04 GMT) (full text, mbox, link).


Message #17 received at 806406@bugs.debian.org (full text, mbox, reply):

From: Iain Lane <laney@debian.org>
To: Julian Andres Klode <jak@debian.org>, Martin Pitt <mpitt@debian.org>, 806406@bugs.debian.org
Subject: Re: Bug#806406: 1.1 regression: apt-get hangs forever, due to missing "_apt" user
Date: Fri, 27 Nov 2015 11:20:53 +0000
[Message part 1 (text/plain, inline)]
On Fri, Nov 27, 2015 at 11:56:03AM +0100, Julian Andres Klode wrote:
> Control: severity -1 important
> 
> On Fri, Nov 27, 2015 at 09:27:05AM +0100, Martin Pitt wrote:
> > Package: apt
> > Version: 1.1
> > Severity: grave
> > 
> > Hello,
> > 
> > after dist-upgrading my sid schroot today, apt-get hangs forever. I
> > suspected some local schroot breakage, so I wiped it and tried to
> > rebuild one, but "mk-sbuild sid" hangs there too when it did the
> > initial bootstrap and runs "apt-get update" in the schroot. Killing
> > them, trying to chroot into the half-created env myself and running
> > with debugging gives the output below.
> > 
> > Dist-upgrading a jessie schroot to sid works on the other hand.
> > 
> > Michael figured out that this is because apt expects the "_apt" system
> > user. This isn't present in a fresh debootstrap, and also gets wiped
> > with schroot as that usually copies /etc/passwd and friends from the
> > host (which does not have the _apt user).
> 
> Why is it not present in a fresh debootstrap? APT is not essential,
> so it is not supposed to be run without its postinst being run
> first.
> 
> And in fact, I just did a debootstrap of sid, and everything
> worked fine, and the _apt user was created as it should be.
> 
> Maybe sbuild is doing something messed up.

AFAICT schroot is copying /etc/passwd from the host system into the
schroot each time, which clobbers the _apt user.

-- 
Iain Lane                                  [ iain@orangesquash.org.uk ]
Debian Developer                                   [ laney@debian.org ]
Ubuntu Developer                                   [ laney@ubuntu.com ]
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, APT Development Team <deity@lists.debian.org>:
Bug#806406; Package apt. (Fri, 27 Nov 2015 11:30:13 GMT) (full text, mbox, link).


Acknowledgement sent to Julian Andres Klode <jak@debian.org>:
Extra info received and forwarded to list. Copy sent to APT Development Team <deity@lists.debian.org>. (Fri, 27 Nov 2015 11:30:13 GMT) (full text, mbox, link).


Message #22 received at 806406@bugs.debian.org (full text, mbox, reply):

From: Julian Andres Klode <jak@debian.org>
To: Iain Lane <laney@debian.org>
Cc: Martin Pitt <mpitt@debian.org>, 806406@bugs.debian.org
Subject: Re: Bug#806406: 1.1 regression: apt-get hangs forever, due to missing "_apt" user
Date: Fri, 27 Nov 2015 12:28:37 +0100
On Fri, Nov 27, 2015 at 11:20:53AM +0000, Iain Lane wrote:
> On Fri, Nov 27, 2015 at 11:56:03AM +0100, Julian Andres Klode wrote:
> > Control: severity -1 important
> > 
> > On Fri, Nov 27, 2015 at 09:27:05AM +0100, Martin Pitt wrote:
> > > Package: apt
> > > Version: 1.1
> > > Severity: grave
> > > 
> > > Hello,
> > > 
> > > after dist-upgrading my sid schroot today, apt-get hangs forever. I
> > > suspected some local schroot breakage, so I wiped it and tried to
> > > rebuild one, but "mk-sbuild sid" hangs there too when it did the
> > > initial bootstrap and runs "apt-get update" in the schroot. Killing
> > > them, trying to chroot into the half-created env myself and running
> > > with debugging gives the output below.
> > > 
> > > Dist-upgrading a jessie schroot to sid works on the other hand.
> > > 
> > > Michael figured out that this is because apt expects the "_apt" system
> > > user. This isn't present in a fresh debootstrap, and also gets wiped
> > > with schroot as that usually copies /etc/passwd and friends from the
> > > host (which does not have the _apt user).
> > 
> > Why is it not present in a fresh debootstrap? APT is not essential,
> > so it is not supposed to be run without its postinst being run
> > first.
> > 
> > And in fact, I just did a debootstrap of sid, and everything
> > worked fine, and the _apt user was created as it should be.
> > 
> > Maybe sbuild is doing something messed up.
> 
> AFAICT schroot is copying /etc/passwd from the host system into the
> schroot each time, which clobbers the _apt user.
> 

Right, and that's a really horrible thing to do, because it breaks
as soon as your chroot has any custom user.

It should just merge any non-system users into the chroot's
passwd.

In any case, APT should not hang, and mvo is working on fixing
that. We'll just not drop privileges if the user does not
exist (and print a warning).


-- 
Julian Andres Klode  - Debian Developer, Ubuntu Member

See http://wiki.debian.org/JulianAndresKlode and http://jak-linux.org/.

When replying, only quote what is necessary, and write each reply
directly below the part(s) it pertains to (`inline'). Thank you.



Message sent on to Martin Pitt <mpitt@debian.org>:
Bug#806406. (Fri, 27 Nov 2015 11:33:14 GMT) (full text, mbox, link).


Message #25 received at 806406-submitter@bugs.debian.org (full text, mbox, reply):

From: Michael Vogt <mvo@ubuntu.com>
To: 806406-submitter@bugs.debian.org
Subject: Bug#806406 in apt marked as pending
Date: Fri, 27 Nov 2015 11:30:35 +0000
Control: tag 806406 pending

Hello,

Bug #806406 in apt reported by you has been fixed in the Git repository. You can
see the commit message below, and you can check the diff of the fix at:

    https://anonscm.debian.org/cgit/apt/apt.git/diff/?id=ef39c14
---
commit ef39c148105cf30aea822022a5f41a120897cc65
Author: Michael Vogt <mvo@ubuntu.com>
Date:   Fri Nov 27 12:29:22 2015 +0100

    Check if the Apt::Sandbox::User exists in CheckDropPrivsMustBeDisabled()
    
    If it does not exist disabled priv dropping as there is nothing
    we can drop to. This will unblock people with special chroots
    or systems that deleted the "_apt" user.
    
    Closes: #806406



Added tag(s) pending. Request was from Michael Vogt <mvo@ubuntu.com> to 806406-submitter@bugs.debian.org. (Fri, 27 Nov 2015 11:33:14 GMT) (full text, mbox, link).


Message sent on to Martin Pitt <mpitt@debian.org>:
Bug#806406. (Fri, 27 Nov 2015 11:33:17 GMT) (full text, mbox, link).


Message #30 received at 806406-submitter@bugs.debian.org (full text, mbox, reply):

From: Michael Vogt <mvo@ubuntu.com>
To: 806406-submitter@bugs.debian.org
Subject: Bug#806406 in apt marked as pending
Date: Fri, 27 Nov 2015 11:30:34 +0000
Control: tag 806406 pending

Hello,

Bug #806406 in apt reported by you has been fixed in the Git repository. You can
see the commit message below, and you can check the diff of the fix at:

    https://anonscm.debian.org/cgit/apt/apt.git/diff/?id=a416a90
---
commit a416a90b631a430306df6ed3fa1d4f3a1bdc7949
Author: Michael Vogt <mvo@ubuntu.com>
Date:   Fri Nov 27 12:07:48 2015 +0100

    Deal with killed acquire methods properly instead of hanging
    
    This fixes a regression caussed by commit
    95278287f4e1eeaf5d96749d6fc9bfc53fb400d0
    that moved the error detection of RunFds() later into the loop.
    However this broke detecting issues like dead acquire methods.
    Instead of relying on the global error state (which is bad)
    we now pass a boolean value back from RunFds() and break on
    false.
    
    Closes: #806406



Reply sent to Michael Vogt <mvo@debian.org>:
You have taken responsibility. (Fri, 27 Nov 2015 15:39:10 GMT) (full text, mbox, link).


Notification sent to Martin Pitt <mpitt@debian.org>:
Bug acknowledged by developer. (Fri, 27 Nov 2015 15:39:11 GMT) (full text, mbox, link).


Message #35 received at 806406-close@bugs.debian.org (full text, mbox, reply):

From: Michael Vogt <mvo@debian.org>
To: 806406-close@bugs.debian.org
Subject: Bug#806406: fixed in apt 1.1.1
Date: Fri, 27 Nov 2015 15:34:32 +0000
Source: apt
Source-Version: 1.1.1

We believe that the bug you reported is fixed in the latest version of
apt, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 806406@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Vogt <mvo@debian.org> (supplier of updated apt package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 27 Nov 2015 16:04:59 +0100
Source: apt
Binary: apt libapt-pkg5.0 libapt-inst2.0 apt-doc libapt-pkg-dev libapt-pkg-doc apt-utils apt-transport-https
Architecture: source all amd64
Version: 1.1.1
Distribution: unstable
Urgency: medium
Maintainer: APT Development Team <deity@lists.debian.org>
Changed-By: Michael Vogt <mvo@debian.org>
Description:
 apt        - commandline package manager
 apt-doc    - documentation for APT
 apt-transport-https - https download transport for APT
 apt-utils  - package management related utility programs
 libapt-inst2.0 - deb package format runtime library
 libapt-pkg-dev - development files for APT's libapt-pkg and libapt-inst
 libapt-pkg-doc - documentation for APT development
 libapt-pkg5.0 - package management runtime library
Closes: 806406 806422
Changes:
 apt (1.1.1) unstable; urgency=medium
 .
   [ Michael Vogt ]
   * Deal with killed acquire methods properly instead of hanging
     (Closes: #806406)
   * Check if the Apt::Sandbox::User exists in CheckDropPrivsMustBeDisabled()
     (Closes: #806406)
 .
   [ David Kalnischkies ]
   * appease adequate with some weak symbols for -private (Closes: #806422)
Checksums-Sha1:
 321e5ab45ae8f4633faa0fe7d60c2dfed06cbda3 2315 apt_1.1.1.dsc
 409d179e6e150ec3c1454dc1eaf55cad971e0e1c 1990092 apt_1.1.1.tar.xz
 ff2cc36e8c97913253647f56823df84202332155 335662 apt-doc_1.1.1_all.deb
 6d8667a97e14cd0e07e444248f4df3285da67354 145692 apt-transport-https_1.1.1_amd64.deb
 9ed9093f12d705b2edcb96c4f5a4ef8bc176a1ee 380022 apt-utils_1.1.1_amd64.deb
 ab1445f8ed8ed51c9462eae35a4cc1402b0a1685 1083278 apt_1.1.1_amd64.deb
 51bac09a311105c6b7d417f684c687f024f2e68c 175886 libapt-inst2.0_1.1.1_amd64.deb
 65f987ba283ac0b54ebff904b3735c4873419278 214664 libapt-pkg-dev_1.1.1_amd64.deb
 5025e411ea460da4c1657ef0ef0e84d3699bc0ad 979908 libapt-pkg-doc_1.1.1_all.deb
 1421da106df9444ec045e16a0285a3d1fdaad385 790274 libapt-pkg5.0_1.1.1_amd64.deb
Checksums-Sha256:
 7cfefecb6a18e49ce0f4a17272ed1eff983d42e94290282da8867dabf8ac37e3 2315 apt_1.1.1.dsc
 a63d0b1aabdba7a9b038525c0e399f08cd6bc7d5a35143c45bcc8780f01cf546 1990092 apt_1.1.1.tar.xz
 e3bd34b2b9cd381d87abc392e032fcd251df0d62f95a786ceadfa5f74a47ee29 335662 apt-doc_1.1.1_all.deb
 bb5badd4835cafe1a475c87dd99a9d201d6b00c6e0c1b583ea379438c9cd615b 145692 apt-transport-https_1.1.1_amd64.deb
 e386758356997269a19be9702661db7ae2fc7439fd4d332ddb0f926f19f7128e 380022 apt-utils_1.1.1_amd64.deb
 661c1ab6a25cd7a2306cd58b67bdd3f819de62d04de2babeb122bf9b618b6fcc 1083278 apt_1.1.1_amd64.deb
 412f903c64141ed7d180bc2bb9d51531d606e86669811ec7c132cddd0f616986 175886 libapt-inst2.0_1.1.1_amd64.deb
 f4b8d16d0b3f89d7608d33ac41337d30db4bbcc9df0cfda98a0239f14d86784f 214664 libapt-pkg-dev_1.1.1_amd64.deb
 c0326956b4da76c6614e589672a17591a093a504493326cedebc0a1aa48a7493 979908 libapt-pkg-doc_1.1.1_all.deb
 13dedbc452813f63924408fc3249224681a6e3dfde97b64cff3fc01a04d8c1b7 790274 libapt-pkg5.0_1.1.1_amd64.deb
Files:
 9d5f92b9d904d1343f463631042cc552 2315 admin important apt_1.1.1.dsc
 5f3ddfc45aeb75e61e5152568b68c6c9 1990092 admin important apt_1.1.1.tar.xz
 72278b06916889e9d1c3929c2dbc2c66 335662 doc optional apt-doc_1.1.1_all.deb
 ba610b6814d97f92dd4b145cba5be73d 145692 admin optional apt-transport-https_1.1.1_amd64.deb
 e1d4c30453e9a5b8ec89dabb317d876b 380022 admin important apt-utils_1.1.1_amd64.deb
 02340d317ed9dd5ea7a78e4a3f9d4ef3 1083278 admin important apt_1.1.1_amd64.deb
 e184ea3ed83c496820e450b9c28ebce9 175886 libs important libapt-inst2.0_1.1.1_amd64.deb
 7380064ffb657ba72b2ba43e7d7389c0 214664 libdevel optional libapt-pkg-dev_1.1.1_amd64.deb
 0d33eafdb43b89a2865c7e41d02272ea 979908 doc optional libapt-pkg-doc_1.1.1_all.deb
 68c9339c5dfae56bd229a84c869afbbe 790274 libs important libapt-pkg5.0_1.1.1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=g0ej
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 27 Dec 2015 07:25:12 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Jan 5 01:52:17 2018; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.