• Re: Restart rsyslog only once after few packages are upgraded

    From julien.puydt@gmail.com@21:1/5 to All on Wed Oct 26 12:00:01 2022
    Le mercredi 26 octobre 2022 à 11:49 +0200, Jędrzej Dudkiewicz a écrit :

    in its postinstall script. As this causes rsyslog to be restarted a
    few times in a row it sometimes results in rsyslog not functioning.


    High-severity issue right there: restarting should just work no matter
    what. Instead of trying to limit the number of restarts, I would try to
    make them just work!

    Cheers,

    J.Puydt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?J=C4=99drzej_Dudkiewicz?=@21:1/5 to All on Wed Oct 26 12:00:02 2022
    I'm sorry if it was answered earlier, but I *really* couldn't find
    anything about it.

    I have few packages that are installed as part of a larger system on
    Debian running on BeagleBone. These packages frequently (for some
    strange reason - I'm not the only developer) modify files that go to
    the /etc/rsyslog.d/ directory. These files are not part of
    configuration, they are copied there by hand in postinstall script
    from known source, reason being that which file is copied depends on
    external configuration. This works without major problems. What is
    problematic is that when these packages are upgraded, they are
    upgraded few at a time, sometimes two are upgraded, sometimes four,
    sometimes all of them. Because of this each package contains the
    following:

    systemctl restart rsyslog

    in its postinstall script. As this causes rsyslog to be restarted a
    few times in a row it sometimes results in rsyslog not functioning.
    Thus, my question:

    Is there a way to restart rsyslog only once, after all packages are
    installed? I hope for something similar to "dh $@ --with-systemd" in
    "rules" file (but "dh -l" does not show anything that looks like it
    should work). My guess is that it should possible to somehow combine
    "dh $@ --with-systemd" to achieve what I want, but I don't even know
    where should I start.

    If it is of any importance, I use "debuild" to build packages.

    Also if this is not the best list, would debian-apt or debian-dpkg be better?

    TIA,
    --
    Jędrzej Dudkiewicz

    I really hate this damn machine, I wish that they would sell it.
    It never does just what I want, but only what I tell it.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Michael Biebl@21:1/5 to =?UTF-8?Q?J=c4=99drzej_Dudkiewicz?= on Wed Oct 26 12:30:01 2022
    To: debian-devel@lists.debian.org

    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------0KpgF22qL4HHrnxAaI23a5cD
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    QW0gMjYuMTAuMjIgdW0gMTI6MTQgc2NocmllYiBNaWNoYWVsIEJpZWJsOg0KPiANCj4gVGhp cyB0cmlnZ2VyIGlzIGFjdGl2YXRlZCBieSBwYWNrYWdlcyBpbnN0YWxsaW5nIGZpbGVzIGlu dG8gL2V0Yy9yc3lzbG9nLmQNCj4gDQo+IEJ1dCB5b3UgY2FuIGFjdGl2YXRlIHRoYXQgdHJp Z2dlciBleHBsaWNpdGx5IGFzIHdlbGwgdmlhDQo+IGRwa2ctdHJpZ2dlciAtLW5vdy1hd2Fp dCByc3lzbG9nDQo+IA0KPiANCj4gU28sIGlmIHlvdXIgcGFja2FnZSBzaGlwcyBhIGZpbGUg aW4gL2V0Yy9yc3lzbG9nLmQvIGV2ZXJ5dGhpbmcgc2hvdWxkIA0KPiB3b3JrIG9vdGIuIElm IHlvdSBjcmVhdGUgdGhlIGZpbGUgZHluYW1pY2FsbHkgdmlhIG1haW50c2NyaXB0cywgeW91 IG5lZWQgDQo+IHRvIGFkZCBhbiBleHBsaWNpdCBkcGtnIHRyaWdnZXIgaW4geW91ciBtYWlu dHNjcmlwdHMuDQoNCkkgbmVlZCB0byB0YWtlIHRoaXMgYmFjay4gQXRtLCB3ZSBkb24ndCBh bGxvdyBhbiBleHBsaWNpdCBkcGtnLXRyaWdnZXIgDQpmb3IgcnN5c2xvZyB2aWEgdGhlIG5h bWUgInJzeXNsb2ciLg0KDQpXZSBjb3VsZCBhZGQgaXQgdGhvdWdoLCBpZiB0aGVyZSBpcyBh IG5lZWQgZm9yIGl0Lg0K

    --------------0KpgF22qL4HHrnxAaI23a5cD--

    -----BEGIN PGP SIGNATURE-----

    wsF5BAABCAAjFiEECbOsLssWnJBDRcxUauHfDWCPItwFAmNZC/QFAwAAAAAACgkQauHfDWCPItyx Sw/+IuP3dLAmTeUxbborie/PO3Iu8COMSLm2OGWKKXZqxEMXVMpy7IssLRFT0BrRz522qg1bSI7N jXKi4nwbp7yfjTj0+7+Hrul10tpHRGasjmHKxA9TXIjQDHQqs4Pax3PkmVIppNIkDSql64QzRnHw sigRUq0WMuL3+SlYm1SMf2CgQDaquATGuIRyHWTttoSh/7SuYURY/RAu8n0IFb/3TOwYcQwm0T0N i49ruSi5KOz21fvjrQMLXVq4ij7rct6lnz7UbOmS84jUZDjj3gheaHDHdTT9ilSE2FkNoKc+lJC8 Xp48XVw/4YBEFSHQl4lGbAgwmTGvachdPrilyTymF1fw/uhhTV52Z8K5WRPvNf6pdO5izRxOQDle pFSP/Dh7vBLbgU/8RjpOcLxEKq0/TKsKFsPQuwe4OJNxdTlXzfqXjMk5KNO1rxjkR+k02lAaMcem MfEo6RoP34eIWOxmeP2Rzcy39fI3ihER4aU9lkj8lMKreLDyZ7Re5vi382h39AzX26fmZJ/+d2zR kbsrQ17HYQeOaFjaD4D8MOfh0vl3iHUf/kcMh9r3q9yglUrUySDgS48HH7uDqphbYvpy5FR3fE6v PSx6i44cKzMdrE6Zeu1mkBGTPJ+KB52kTP1xfVo4TPZ1YfecemgMFkVxpyUIrOeKLa26YJyLPKVn 7qI=
    =CHem
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Michael Biebl@21:1/5 to All on Wed Oct 26 12:20:02 2022
    To: jedrzej.dudkiewicz@gmail.com (=?UTF-8?Q?J=c4=99drzej_Dudkiewicz?=)
    To: debian-devel@lists.debian.org

    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------fsqHCJUFkHQf51zUjIKog6mt
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    QW0gMjYuMTAuMjIgdW0gMTE6NTMgc2NocmllYiBqdWxpZW4ucHV5ZHRAZ21haWwuY29tOg0K PiBMZSBtZXJjcmVkaSAyNiBvY3RvYnJlIDIwMjIgw6AgMTE6NDkgKzAyMDAsIErEmWRyemVq IER1ZGtpZXdpY3ogYSDDqWNyaXTCoDoNCj4+DQo+PiBpbiBpdHMgcG9zdGluc3RhbGwgc2Ny aXB0LiBBcyB0aGlzIGNhdXNlcyByc3lzbG9nIHRvIGJlIHJlc3RhcnRlZCBhDQo+PiBmZXcg dGltZXMgaW4gYSByb3cgaXQgc29tZXRpbWVzIHJlc3VsdHMgaW4gcnN5c2xvZyBub3QgZnVu Y3Rpb25pbmcuDQo+Pg0KPiANCj4gSGlnaC1zZXZlcml0eSBpc3N1ZSByaWdodCB0aGVyZTog cmVzdGFydGluZyBzaG91bGQganVzdCB3b3JrIG5vIG1hdHRlcg0KPiB3aGF0LiBJbnN0ZWFk IG9mIHRyeWluZyB0byBsaW1pdCB0aGUgbnVtYmVyIG9mIHJlc3RhcnRzLCBJIHdvdWxkIHRy eSB0bw0KPiBtYWtlIHRoZW0ganVzdCB3b3JrIQ0KDQpXaGlsZSBpbiB0aGVvcnkgSSBhZ3Jl ZSB3aXRoIHlvdSwgSSBkb24ndCB0aGluayBpdCdzIHNhZmUgdG8gcmVzdGFydCANCipvdGhl ciogcGFja2FnZXMgZHVyaW5nIGFuIHVwZ3JhZGUuDQpZb3UgY2FuJ3Qga25vdyBpbiB3aGlj aCBzdGF0ZSB0aGF0IHBhY2thZ2UgaXMgaW4gKGVzcGVjaWFsbHkgcmVnYXJkaW5nIA0KaXQn cyBkZXBlbmRlbmNpZXMpLg0KDQpNaWNoYWVsDQoNCg0K

    --------------fsqHCJUFkHQf51zUjIKog6mt--

    -----BEGIN PGP SIGNATURE-----

    wsF5BAABCAAjFiEECbOsLssWnJBDRcxUauHfDWCPItwFAmNZCRgFAwAAAAAACgkQauHfDWCPItzL +Q/+MLfiqgzn/n5bSvSCAaW7bSJgkw7Nh4VDmZG0C+LO/TGILBmDd7pX+dHyAqa6Ilzg94HQdWtP PLhaVbzntZsg/Pzjh5w66Ugc5OY33bvKiftcr5H9XdI0YVXbYza1ox2fp+nUwq8ddypWY1UOzraC lJs1oxol7XTxt/XvTZObDwy4skvdUdWQRsiXHK9dXqA5S/RdB8/GTRObarJGMJ15wJILAjIhHoqF BE/LzfuV+6wJ+wPSTvho8P5VznsBJ/ZV7EulKEdgvfrpg/jQDcPIQZ7tQfcHCKjb93wg5xEmH1B/ XkkDHRfBnRTrwlPReYWCWXsRp3tOy8dyRbCeqA1GZyO1rw/+tDZo0N9+z1hubI+umaISANAY37FS uEHIgmG3janLyKnaJtxUvDbCaMRRCQ9IaN6Mp3XBZfAG8LA0c6bVL7y/uDCGkaR4crS3UdMFuwG8 LJTbSdVu+zpZiC6FYdnCp+iq1P2UE0aOFKKGdls5FGR/lZR7cqIgNozEAYuB6wuFNGgpM1I+fX0p QQ3WjIoOLUBbwHKSJDmXglxR054y3ik17tdCgA14swuDRkvQuBud3C3kCUc795Ju28yF8jnhlMM5 G0fPEBmxRHqqDXWJzlaNicwhh6jYP5lJ3hQeK8L4FOdOGKKADKPcS0BJPKU1ou8Ml6XJWfK6C3Jy JbE=
    =iI3l
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Michael Biebl@21:1/5 to =?UTF-8?Q?J=c4=99drzej_Dudkiewicz?= on Wed Oct 26 12:20:02 2022
    To: debian-devel@lists.debian.org

    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------55Be2m00L3gyuoYm4KDCuhXn
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    QW0gMjYuMTAuMjIgdW0gMTE6NDkgc2NocmllYiBKxJlkcnplaiBEdWRraWV3aWN6Og0KPiBJ J20gc29ycnkgaWYgaXQgd2FzIGFuc3dlcmVkIGVhcmxpZXIsIGJ1dCBJICpyZWFsbHkqIGNv dWxkbid0IGZpbmQNCj4gYW55dGhpbmcgYWJvdXQgaXQuDQo+IA0KPiBJIGhhdmUgZmV3IHBh Y2thZ2VzIHRoYXQgYXJlIGluc3RhbGxlZCBhcyBwYXJ0IG9mIGEgbGFyZ2VyIHN5c3RlbSBv bg0KPiBEZWJpYW4gcnVubmluZyBvbiBCZWFnbGVCb25lLiBUaGVzZSBwYWNrYWdlcyBmcmVx dWVudGx5IChmb3Igc29tZQ0KPiBzdHJhbmdlIHJlYXNvbiAtIEknbSBub3QgdGhlIG9ubHkg ZGV2ZWxvcGVyKSBtb2RpZnkgZmlsZXMgdGhhdCBnbyB0bw0KPiB0aGUgL2V0Yy9yc3lzbG9n LmQvIGRpcmVjdG9yeS4gVGhlc2UgZmlsZXMgYXJlIG5vdCBwYXJ0IG9mDQo+IGNvbmZpZ3Vy YXRpb24sIHRoZXkgYXJlIGNvcGllZCB0aGVyZSBieSBoYW5kIGluIHBvc3RpbnN0YWxsIHNj cmlwdA0KPiBmcm9tIGtub3duIHNvdXJjZSwgcmVhc29uIGJlaW5nIHRoYXQgd2hpY2ggZmls ZSBpcyBjb3BpZWQgZGVwZW5kcyBvbg0KPiBleHRlcm5hbCBjb25maWd1cmF0aW9uLiBUaGlz IHdvcmtzIHdpdGhvdXQgbWFqb3IgcHJvYmxlbXMuIFdoYXQgaXMNCj4gcHJvYmxlbWF0aWMg aXMgdGhhdCB3aGVuIHRoZXNlIHBhY2thZ2VzIGFyZSB1cGdyYWRlZCwgdGhleSBhcmUNCj4g dXBncmFkZWQgZmV3IGF0IGEgdGltZSwgc29tZXRpbWVzIHR3byBhcmUgdXBncmFkZWQsIHNv bWV0aW1lcyBmb3VyLA0KPiBzb21ldGltZXMgYWxsIG9mIHRoZW0uIEJlY2F1c2Ugb2YgdGhp cyBlYWNoIHBhY2thZ2UgY29udGFpbnMgdGhlDQo+IGZvbGxvd2luZzoNCj4gDQo+IHN5c3Rl bWN0bCByZXN0YXJ0IHJzeXNsb2cNCj4gDQo+IGluIGl0cyBwb3N0aW5zdGFsbCBzY3JpcHQu IEFzIHRoaXMgY2F1c2VzIHJzeXNsb2cgdG8gYmUgcmVzdGFydGVkIGENCj4gZmV3IHRpbWVz IGluIGEgcm93IGl0IHNvbWV0aW1lcyByZXN1bHRzIGluIHJzeXNsb2cgbm90IGZ1bmN0aW9u aW5nLg0KDQpUaGlzIHNob3VsZG4ndCBiZSBhIHByb2JsZW0gaW4gdGhlb3J5Lg0KVGhhdCBz YWlkLCByc3lzbG9nIGNvdWxkIGJlIHBhcnQgb2YgdGhlIHVwZ3JhZGUgcHJvY2Vzcywgc28g bWF5YmUgaXMgaW4gDQphbiBpbmNvbnNpc3RlbnQgc3RhdGUgd2hlbiB5b3UgdHJpZ2dlciB0 aGUgcmVzdGFydC4NCldvdWxkIGJlIGludGVyZXN0ZWQgdG8ga25vdyBtb3JlIGFib3V0IHRo ZSBzcGVjaWZpYyBmYWlsdXJlcyB5b3UgDQplbmNvdW50ZXJlZC4NCg0KPiBUaHVzLCBteSBx dWVzdGlvbjoNCj4gDQo+IElzIHRoZXJlIGEgd2F5IHRvIHJlc3RhcnQgcnN5c2xvZyBvbmx5 IG9uY2UsIGFmdGVyIGFsbCBwYWNrYWdlcyBhcmUNCj4gaW5zdGFsbGVkPyBJIGhvcGUgZm9y IHNvbWV0aGluZyBzaW1pbGFyIHRvICJkaCAkQCAtLXdpdGgtc3lzdGVtZCIgaW4NCj4gInJ1 bGVzIiBmaWxlIChidXQgImRoIC1sIiBkb2VzIG5vdCBzaG93IGFueXRoaW5nIHRoYXQgbG9v a3MgbGlrZSBpdA0KPiBzaG91bGQgd29yaykuIE15IGd1ZXNzIGlzIHRoYXQgaXQgc2hvdWxk IHBvc3NpYmxlIHRvIHNvbWVob3cgY29tYmluZQ0KPiAiZGggJEAgLS13aXRoLXN5c3RlbWQi IHRvIGFjaGlldmUgd2hhdCBJIHdhbnQsIGJ1dCBJIGRvbid0IGV2ZW4ga25vdw0KPiB3aGVy ZSBzaG91bGQgSSBzdGFydC4NCg0KVGhlIHJzeXNsb2cgcGFja2FnZSBhbHJlYWR5IG9mZmVy cyBhIGRwa2cgdHJpZ2dlciB3aGljaCBkb2VzDQpgaW52b2tlLXJjLmQgcnN5c2xvZyB0cnkt cmVzdGFydCB8fCB0cnVlYA0KDQpUaGlzIHRyaWdnZXIgaXMgYWN0aXZhdGVkIGJ5IHBhY2th Z2VzIGluc3RhbGxpbmcgZmlsZXMgaW50byAvZXRjL3JzeXNsb2cuZA0KDQpCdXQgeW91IGNh biBhY3RpdmF0ZSB0aGF0IHRyaWdnZXIgZXhwbGljaXRseSBhcyB3ZWxsIHZpYQ0KZHBrZy10 cmlnZ2VyIC0tbm93LWF3YWl0IHJzeXNsb2cNCg0KDQpTbywgaWYgeW91ciBwYWNrYWdlIHNo aXBzIGEgZmlsZSBpbiAvZXRjL3JzeXNsb2cuZC8gZXZlcnl0aGluZyBzaG91bGQgDQp3b3Jr IG9vdGIuIElmIHlvdSBjcmVhdGUgdGhlIGZpbGUgZHluYW1pY2FsbHkgdmlhIG1haW50c2Ny aXB0cywgeW91IG5lZWQgDQp0byBhZGQgYW4gZXhwbGljaXQgZHBrZyB0cmlnZ2VyIGluIHlv dXIgbWFpbnRzY3JpcHRzLg0KDQpNaWNoYWVsDQoNCg==

    --------------55Be2m00L3gyuoYm4KDCuhXn--

    -----BEGIN PGP SIGNATURE-----

    wsF5BAABCAAjFiEECbOsLssWnJBDRcxUauHfDWCPItwFAmNZCHEFAwAAAAAACgkQauHfDWCPItxW LxAAk6h6NYzv4yS+nIu0aHtEEjMB5VjmVea/IMLG2Gf375Jk4rIGlsJhpWdYHBVCLJQgHnBUdZJ6 BbqnTcpBPiYu66xWiApAOCOURcpG+IW12xkbgt7KonPOORCOhFZKqhuxSkfQbdNyPjfsOzpIvj+h ovUQTd/lhHFUbG1TG9cYiNjbJFvTcUTDmckG+P3ew8ksVrqx9+susXBwv7SlpqkAWRv3gu3qptes yCVsQGMSfA8YuDvfv7zHKPIN/L4bnnwGvne4NokeofPUjDzBsXBVYoQS5Sci6NaDOqUNUL8/N6XT gOdg+sI1hHAT21PjMd9mxC59YtRf/aJqEZlAV5xg8nJy7fjE8i63uU7X1HmG1vae9SkHyHTsZxTi PrA+zjOd4QNn/WbPAnJJPGG03ronY8XG7UbD1v7N7QdrehnGHxUgeAzB12Rqq/FSgKLUN7U88e9w /V/m1Alk2A9KjJ016+YS7WwRXrkrmTTA7jxZDKgOfm8l3zlD3vQniEuei16jKDuUqVXgzYPbGG+x /43BNFXqC3EP7YJ0TMLxtDhNHqmEIjkrIRf3Ra4nSTLGouFMaf547bex0LZyGFi1t6ADxKltANJC 2hcbGOhuf6iXTnPqCqsB6stGmDt//2PaeGlQSqGXwBDLWVuDAcBomKraOeiZddP+yFvMN+M9fdfh zok=
    =RS3E
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?J=C4=99drzej_Dudkiewicz?=@21:1/5 to biebl@debian.org on Mon Oct 31 15:00:01 2022
    On Wed, Oct 26, 2022 at 12:14 PM Michael Biebl <biebl@debian.org> wrote:

    Am 26.10.22 um 11:49 schrieb Jędrzej Dudkiewicz:
    I'm sorry if it was answered earlier, but I *really* couldn't find
    anything about it.

    I have few packages that are installed as part of a larger system on
    Debian running on BeagleBone. These packages frequently (for some
    strange reason - I'm not the only developer) modify files that go to
    the /etc/rsyslog.d/ directory. These files are not part of
    [...]
    sometimes all of them. Because of this each package contains the
    following:

    systemctl restart rsyslog

    in its postinstall script. As this causes rsyslog to be restarted a
    few times in a row it sometimes results in rsyslog not functioning.

    This shouldn't be a problem in theory.
    That said, rsyslog could be part of the upgrade process, so maybe is in
    an inconsistent state when you trigger the restart.
    Would be interested to know more about the specific failures you
    encountered.

    I'm sorry but unfortunately I can't provide more info: I am not
    responsible for installing these packages, this is done by other
    people, in addition it is for most part automatic and happens very
    rarely - we care about it only because we update these machines
    (BeagleBones) in bulk few dozens at a time and in case of failure
    machine immediate "administrative action" is taken (manual rsyslog
    restart). But there are two symptoms - either rsyslog does not start
    or it starts but there are no entries from running services.

    Thus, my question:

    Is there a way to restart rsyslog only once, after all packages are installed? I hope for something similar to "dh $@ --with-systemd" in "rules" file (but "dh -l" does not show anything that looks like it
    should work). My guess is that it should possible to somehow combine
    "dh $@ --with-systemd" to achieve what I want, but I don't even know
    where should I start.

    The rsyslog package already offers a dpkg trigger which does
    `invoke-rc.d rsyslog try-restart || true`

    This trigger is activated by packages installing files into /etc/rsyslog.d

    But you can activate that trigger explicitly as well via
    dpkg-trigger --now-await rsyslog


    So, if your package ships a file in /etc/rsyslog.d/ everything should
    work ootb. If you create the file dynamically via maintscripts, you need
    to add an explicit dpkg trigger in your maintscripts.

    As you wrote there is currently no such dpkg-trigger so there is no
    way for us to do it - even if you added it we are still on Debian 9
    without a real way to upgrade all systems.

    What we currently settled for is:

    * install files to /etc/rsyslog.d/ from *.deb
    * modify installed files as required
    * update using `apt-get` with ` -y -o
    Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confnew"
    `

    This way rsyslog is restarted once as far as I can tell and it seems
    to work - of course this will overwrite all local changes, but this
    isn't a real problem as there is a strict policy in place preventing administrators from modifying configuration files, so this should
    _somehow_ work. I hope so at least.

    Thanks a lot.

    Regards,
    --
    Jędrzej Dudkiewicz

    I really hate this damn machine, I wish that they would sell it.
    It never does just what I want, but only what I tell it.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)