From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 6461171F67 for ; Wed, 6 Oct 2021 10:15:56 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 479FA8454 for ; Wed, 6 Oct 2021 10:15:56 +0200 (CEST) Received: from sonic305-20.consmr.mail.ne1.yahoo.com (sonic305-20.consmr.mail.ne1.yahoo.com [66.163.185.146]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id 1A3EC843C for ; Wed, 6 Oct 2021 10:15:53 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1633508146; bh=iGv7YXsL0oDtCWDUklUxx2hsWhvaTKkMdP2HwaRk03w=; h=References:In-Reply-To:From:Date:Subject:To:Cc:From:Subject:Reply-To; b=G8UxBbF9NY5gtzzg0NnCimncJQEG7SRnv5N75xK88ILqWTqwhn5uAh1aYBVTolSuGID1QwrGAjtwTbY+a7YPy3wC2w4mxFGsHPl1N7I5HR6lCCJi5PGXXI7/LR0dZhiAftiwWtE2/HtXWJkIrM7qJLSGmgyWsW3Xasvx3XWXpdXYroLUKKPrefZ1KSNlVrah5yAL7/5PY1rsu9mTi75F6sn0gr90iJBGdlCCbPPe0BMi9hRfgaJ+nu3+jJWyMWKtiGSmsWYxq4dnzlrmfTBoARnalokp04N3nLei6gqJSknsTFUXMB6E3UArfNX7V1vzXq6FawheUzCrEVuiRowFfQ== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1633508146; bh=7oG9CEVSP2LKrCRwo57aDoqD3UwfYZJrRAcMnDrO+A8=; h=X-Sonic-MF:From:Date:Subject:To:From:Subject; b=ZTJfK7Ly+6vEjmlWYF2Ttid/+ULLg8NUdwgWx2stZp6dandJH7pEEl68A+nMlFREioJvSNzcSW7Oi6qGEt5RW7u6JCCxG6SwC1iQuH2ksS18vptI9OsY/ZTuUIh4pw1rtwWtMq0seVhf0XW0Aiu5c+hZXzqSQsfFtYpBEjHXzW5bQ1j+bNsGMz34W8daCQ5royiVnONXielv+SWKgp4tIKsah9RU/AJP8ZltjdimGYBvTjjXDtbHvNqABQdYXjs0XVXM7lp2Xxl1YdnmSN0YV50yScJSF9T2DsoG7kdbNBuN3gG9/6vr3pv/1gkrTSko4PL/lecxQv8gmuqNjGbVJw== X-YMail-OSG: 7d816goVM1md4uCHZRCuKyRtucNC1ifWnW2LyLP_Kk1D94P3MzuRcCptFb9_9bI NYtvSixpNr_PfEonz6I1gxfD6TRQJANPWZVee4hLnImKfH__xOxarhhfkxBN90pt6I5ZVi1FgCKm QaJRYqiA9yhxPigFB.LAgwpadUB5IqhAW4aBGcxLd9W0SS6Uu6Ps0Mjb4imtQBtSUmkwALiDVivM fdcDqBJeqsCtLXFLUzyG7aChgn3lV6VoZfQpkP2yZjd5oaJLNL9DQYVghyhwymynmFSWtJu7Ne8h 3y6A6CqJQ.ukWvtdUwWbdVfma8meQmhrFNFg6myoIvnzqVsQWqqkZpuon0sIlTcPKqBKoLVUAO_Q b2dGtJVQnL6gumoxwy9Egp64x6GIM_vNHvt55kb6On3R1Z1BXx8bat0CttNNJxn0tIyFNtjjTrkj vn5oVvwbvHq6xNE6gtebHMrqgKH7cCgUIB8NcOPjQZYTOjIp7hMeN7OMLYqoAC8jIgEfEAb4NQMv Dat0F4Bcl86FQUpPbThGDSRpP54Kpc3e4ROQ6ynChKdRAomC4WmpmtZugqMW0k4ojwscTkDq1S8Z M7ZCeCrVOnY48Z_hH05BVbY_dEvECSPR.YS.gd0_gz0qWUcvWwcG9pR_k1S5.sccTeGv4wcZZ..g cIGx6cq3v6tLqHvhyCpVXYcavArqTLyyVkS.iWLJVGJFDXRFT885qP1I1kwQCSOilLw_w8F7cwpD YA6Z2BRDglyBcP5PTDfGYRIlTDfx3Ixda70K.46Gkd4_4hyFxk55_gwOtHYHlYSYiLT1bBrBUU4V M0NOnEBuNIwFahCOkc.XqHq4w5XU1SUo22cpwIBBWzZpI0zKE5zmC2qH0rcYpBDtA1Ce.OjVesHw _VSLeHWxf8BT5aLlszfzqplMwJ2UOnDNd5KgbMepM0QgqlfkSKnBv.jYMbjbrNiJonNjWrTiqVhI zUO.MoFMlD2rHgLYw_0BD.kcIEsiqS9vor45jB53bg7FxM19lETIZ6VvlIcy7AImPdzC.LSoh7DG c7addclzJIoSFDK2HZl5A9QH_0DH7jrwby.Z7HbZocvTvFKQL3LgUOBZR6wVEGortjIJOEYPZI5s TIqg88Z4xxJ8g4lq_n.M.ZA71w2wMqDV1rnkKraFLlqIix4FOF2WsoOMvbiawhZ6W3NIYkl3Spum d6T4_cc6tYaAB5xHi8kJN94_7XQPr0j6au82lAP2l1L_Wx782RK.OWB.rLOpZoEW.s_rZrQIPgan G0WfAmp8Jw0VFLbGt5P9S9b62unbM2n_uNy4h9T5Ytiq3ryzfU2m4HTPgpIt28EPxlCzH_.uXWgC 80mht9fezLm7QKTdfBZkiRdIK1wF_06TJ9WT0hvVJRY4LXOW3k6YfLmBreWepDRJr2XHIj8NaWcI ksGq.C8.nY47keKx8cMOa90p6RjDeFZqe7p8UnYExl9Y3f.JYGHUBRMoB8xJW2MKTh73JWr9NDYK tI2m5c.UPbLFLm7zvZWnL8RPYkDefPFprOp32LqZWds_1ce4aXqTgYNDCVhc5oBx.mGdhp1WfI9t s4SMoWsoDGm.VKRLq2KXtOt60BJz1ytRLk3Nx2rSv.hWs0IWZjP4E3tk3Rq6nEfSlGQW2qxoBkGa dPH6_CUFo.azxuQC_I7FIoUgpIgEyl6Dfs8X_poKaz4ty6lfueGncLDFn8tVdEnQ4Ohktk.WhlyY m6UWrhZ3D09hvROMoH1VXbCeame_xBrAmuqtuBCi6GTjspJaTBZLYgiSgunpOB7b2SvAxthFGTFH xQLxz9Nfgz3_TpcrdIzM239nc9hL7xhzbcQF7EdfTQlcDYWobAuLJDycr.CF505WEnwUiahcw1t8 tyuXMemWddeoz4Yec5LYQPmBMPC.aLxP7uPm87RUPrJrp6PoUuJYt6GLi9L9JSp.ctQmwDlxhimF KvsfOIxO8pOQY4LNYZn6Rc8Y1InJgsYRAupGktfDaKYh1z_DsKm9.hVulQEaNr0EKzbsgbnhjKJc fmXwrxDjNBs_AjVPIdfjJ_Sho0BPmQgMJtPUKtf5pxKIrVaZNokpF21b8Ee4GoQJQhYQ9FnHMCT2 _qLgV5tXdIl.l16dsEUSCuBM_.4MdkEykt6p7bSkozK7O3UcLzqBjbuq4nCs2O9VpojdZP7AdIov _1YYs34L89NocEe.ZHYaIXt4LfNFjxrndVxULA_HPvVY4fr_tamFvMN2viuJF5tDIP9ylHhJNntT wWlKSUfkyS1wzH2_ujRkwPAQbbexyf5GIW3IHb71jke_uhJzj205y41UsENf5WXh90V14XRdt3aq Sk0NZJA-- X-Sonic-MF: Received: from sonic.gate.mail.ne1.yahoo.com by sonic305.consmr.mail.ne1.yahoo.com with HTTP; Wed, 6 Oct 2021 08:15:46 +0000 Received: by kubenode522.mail-prod1.omega.ne1.yahoo.com (VZM Hermes SMTP Server) with ESMTPA ID db94267240ed9d9f6f5141110ebe4cc9; Wed, 06 Oct 2021 08:15:45 +0000 (UTC) Received: by mail-vs1-f51.google.com with SMTP id o124so2020637vsc.6 for ; Wed, 06 Oct 2021 01:15:45 -0700 (PDT) X-Gm-Message-State: AOAM530LT5m1Lu9G3dWgIBu65I40m1gud6a5YHRmYTCPN0l/1MN9e5zO 0hK+cCSHGLB4/g6hr4vCr6Jn7yjPwTtL4S8U2EE= X-Google-Smtp-Source: ABdhPJyNgCRO82lkeUtscwsQaj5YzxWnKbrjzr5aFwgci6kAZ07QSl8QEVf+xocPRV2C42wA2Az5TILrYgSmy03561I= X-Received: by 2002:a67:d517:: with SMTP id l23mr23410968vsj.54.1633508144796; Wed, 06 Oct 2021 01:15:44 -0700 (PDT) MIME-Version: 1.0 References: <8cd3661e-8f46-0bcd-8f94-cab86e45caf4@proxmox.com> In-Reply-To: <8cd3661e-8f46-0bcd-8f94-cab86e45caf4@proxmox.com> From: Victor Hooi Date: Wed, 6 Oct 2021 19:15:33 +1100 X-Gmail-Original-Message-ID: Message-ID: To: Thomas Lamprecht Cc: Proxmox VE development discussion X-Mailer: WebService/1.1.19116 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo X-SPAM-LEVEL: Spam detection results: 0 AWL 0.527 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider HTML_MESSAGE 0.001 HTML included in message RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust RCVD_IN_MSPIKE_H2 -0.001 Average reputation (+2) SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [zed-functions.sh] Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: Re: [pve-devel] trousers error in latest test repo? X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Oct 2021 08:15:56 -0000 Hi Thomas, Ah - interesting - as a data-point, this was a new install of Proxmox 7.0-2 (from the ISO image), and then I ran an apt update, apt dist-upgrade directly after first boot. I just did an apt update, apt dist-upgrade again - and there was one package to update (trousers). I am still getting an error with this version: Unpacking trousers (0.3.14+fixed1-1.2+pve1) over (0.3.14+fixed1-1.2) ... > Setting up trousers (0.3.14+fixed1-1.2+pve1) ... > Installing new version of config file /etc/init.d/trousers ... > Job for trousers.service failed because the control process exited with > error code. > See "systemctl status trousers.service" and "journalctl -xe" for details. > invoke-rc.d: initscript trousers, action "start" failed. > =E2=97=8F trousers.service - LSB: starts tcsd > Loaded: loaded (/etc/init.d/trousers; generated) > Active: failed (Result: exit-code) since Wed 2021-10-06 01:13:08 PDT= ; > 4ms ago > Docs: man:systemd-sysv-generator(8) > Process: 192905 ExecStart=3D/etc/init.d/trousers start (code=3Dexited= , > status=3D30) > CPU: 9ms Oct 06 01:13:08 mgmt1 systemd[1]: Starting LSB: starts tcsd... > Oct 06 01:13:08 mgmt1 tcsd[192910]: TCSD TDDL[192910]: TrouSerS ioctl: > (25) Inappropriate ioctl for device > Oct 06 01:13:08 mgmt1 tcsd[192910]: TCSD TDDL[192910]: TrouSerS Falling > back to Read/Write device support. > Oct 06 01:13:08 mgmt1 tcsd[192910]: TCSD TCS[192910]: TrouSerS ERROR: TCS > GetCapability failed with result =3D 0x1e > Oct 06 01:13:08 mgmt1 trousers[192905]: Starting Trusted Computing daemon= : > tcsd > Oct 06 01:13:08 mgmt1 trousers[192911]: failed! > Oct 06 01:13:08 mgmt1 systemd[1]: trousers.service: Control process > exited, code=3Dexited, status=3D30/n/a > Oct 06 01:13:08 mgmt1 systemd[1]: trousers.service: Failed with result > 'exit-code'. > Oct 06 01:13:08 mgmt1 systemd[1]: Failed to start LSB: starts tcsd. I should note that the spec sheet for the NUC7i5BNK says it does not have a TPM - would that be related at all to these errors? Thanks, Victor On Wed, 6 Oct 2021 at 18:17, Thomas Lamprecht wrote: > On 06.10.21 00:51, Victor Hooi wrote: > > Hi, > > > > I just installed a new box (Intel NUC7i5BNK) with Proxmox 7.0-2, and th= en > > ran an apt update/dist-upgrade, using the PVE test repos: > > > > There seems to be some error whilst upgrading some "trousers" module: > > > > Setting up trousers (0.3.14+fixed1-1.2) ... > >> Job for trousers.service failed because the control process exited wit= h > >> error code. > >> See "systemctl status trousers.service" and "journalctl -xe" for > details. > >> invoke-rc.d: initscript trousers, action "start" failed. > >> =E2=97=8F trousers.service - LSB: starts tcsd > >> Loaded: loaded (/etc/init.d/trousers; generated) > >> Active: failed (Result: exit-code) since Tue 2021-10-05 15:43:15 > PDT; > >> 4ms ago > >> Docs: man:systemd-sysv-generator(8) > >> Process: 32424 ExecStart=3D/etc/init.d/trousers start (code=3Dexit= ed, > >> status=3D30) > >> CPU: 10ms > > > > > > Oct 05 15:43:15 mgmt1 systemd[1]: Starting LSB: starts tcsd... > >> Oct 05 15:43:15 mgmt1 trousers[32424]: Starting Trusted Computing > daemon: > >> tcsd/etc/init.d/trousers: 32: [: /dev/tpm0: unexpected operator > >> Oct 05 15:43:15 mgmt1 TCSD[32429]: TrouSerS resetting mode of > /var/lib/tpm > >> from 40755 to: 700 > >> Oct 05 15:43:15 mgmt1 tcsd[32429]: TCSD TDDL[32429]: TrouSerS ioctl: > (25) > >> Inappropriate ioctl for device > >> Oct 05 15:43:15 mgmt1 tcsd[32429]: TCSD TDDL[32429]: TrouSerS Falling > back > >> to Read/Write device support. > >> Oct 05 15:43:15 mgmt1 tcsd[32429]: TCSD TCS[32429]: TrouSerS ERROR: TC= S > >> GetCapability failed with result =3D 0x1e > >> Oct 05 15:43:15 mgmt1 trousers[32430]: failed! > >> Oct 05 15:43:15 mgmt1 systemd[1]: trousers.service: Control process > >> exited, code=3Dexited, status=3D30/n/a > >> Oct 05 15:43:15 mgmt1 systemd[1]: trousers.service: Failed with result > >> 'exit-code'. > >> Oct 05 15:43:15 mgmt1 systemd[1]: Failed to start LSB: starts tcsd. > >> dpkg: error processing package trousers (--configure): > >> installed trousers package post-installation script subprocess return= ed > >> error exit status 1 > > > > > > However, this also then causes issues when attempting to finalise other > > packages as well: > > > > dpkg: dependency problems prevent configuration of swtpm-tools: > >> swtpm-tools depends on trousers (>=3D 0.3.9); however: > >> Package trousers is not configured yet. > > > > > > dpkg: error processing package swtpm-tools (--configure): > >> dependency problems - leaving unconfigured > >> Setting up swtpm (0.6.99+1) ... > >> Setting up pve-firewall (4.2-3) ... > >> Setting up libzpool5linux (2.1.1-pve1) ... > >> Setting up gnutls-bin (3.7.1-5) ... > >> Setting up corosync (3.1.5-pve1) ... > >> dpkg: dependency problems prevent configuration of qemu-server: > >> qemu-server depends on swtpm-tools; however: > >> Package swtpm-tools is not configured yet. > > > > > > dpkg: error processing package qemu-server (--configure): > >> dependency problems - leaving unconfigured > >> Setting up zfsutils-linux (2.1.1-pve1) ... > >> Installing new version of config file /etc/zfs/zfs-functions ... > >> Setting up zfs-initramfs (2.1.1-pve1) ... > >> dpkg: dependency problems prevent configuration of pve-manager: > >> pve-manager depends on qemu-server (>=3D 6.2-17); however: > >> Package qemu-server is not configured yet. > > > > > > dpkg: error processing package pve-manager (--configure): > >> dependency problems - leaving unconfigured > >> Setting up zfs-zed (2.1.1-pve1) ... > >> Installing new version of config file /etc/zfs/zed.d/zed-functions.sh > ... > >> dpkg: dependency problems prevent processing triggers for > pve-ha-manager: > >> pve-ha-manager depends on qemu-server (>=3D 6.0-15); however: > >> Package qemu-server is not configured yet. > > > > > > dpkg: error processing package pve-ha-manager (--configure): > >> dependency problems - leaving triggers unprocessed > >> Processing triggers for initramfs-tools (0.140) ... > >> update-initramfs: Generating /boot/initrd.img-5.11.22-5-pve > >> Running hook script 'zz-proxmox-boot'.. > >> Re-executing '/etc/kernel/postinst.d/zz-proxmox-boot' in new private > mount > >> namespace.. > >> Copying and configuring kernels on /dev/disk/by-uuid/5994-C1A0 > >> Copying kernel and creating boot-entry for 5.11.22-4-pve > >> Copying kernel and creating boot-entry for 5.11.22-5-pve > >> Processing triggers for libc-bin (2.31-13) ... > >> Processing triggers for man-db (2.9.4-2) ... > >> Processing triggers for mailcap (3.69) ... > >> Errors were encountered while processing: > >> trousers > >> swtpm-tools > >> qemu-server > >> pve-manager > >> pve-ha-manager > >> E: Sub-process /usr/bin/dpkg returned an error code (1) > > > > > > Does anybody know what this is? > > It's related to TPM, swtmp-tools pulls it in and that in turn gets pulled > in by > qemu-server which now provides TPM support for guests. > > It seems it init script was a bit borked[0], but that only shows up on > some systems, > FWICT ones that where updated from pre PVE 6 or even older. > > I re-build the upstream package with a more resilient postinst and init > script and > uploaded that to pvetest as `trousers` in version `0.3.14+fixed1-1.2+pve1= ` > (fwiw, > the "fixed" part in the version was already there and not my invention ;) > > An error may still get printed on update, but it should not fail the whol= e > update > itself anymore (which has no use on its own). > > [0]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D895201 > > hope that helps, > Thomas > >