[Bug 1768560] Re: Netplan generates systemd-networkd config files with incorrect file permissions

[Adam Conrad]

*** This bug is a duplicate of bug 1736965 ***
    https://bugs.launchpad.net/bugs/1736965

Hello Corey, or anyone else affected,

Accepted netplan.io into bionic-proposed. The package will build now and
be available at
https://launchpad.net/ubuntu/+source/netplan.io/0.40.1~18.04.3 in a few
hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested and change the tag from
verification-needed-bionic to verification-done-bionic. If it does not
fix the bug for you, please add a comment stating that, and change the
tag to verification-failed-bionic. In either case, without details of
your testing we will not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

** Changed in: netplan.io (Ubuntu Bionic)
       Status: Fix Released => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to netplan.io in Ubuntu.
Matching subscriptions: foundations-bugs
https://bugs.launchpad.net/bugs/1768560

Title:
  Netplan generates systemd-networkd config files with incorrect file
  permissions

Status in netplan:
  Triaged
Status in netplan.io package in Ubuntu:
  Fix Released
Status in netplan.io source package in Bionic:
  Fix Committed

Bug description:
  Hello,

  If the umask is set to 077 in /etc/profile and /etc/bash.bashrc (to
  comply with CIS-CAT recommendations), the files that netplan generates
  in /run/systemd/network are created as 0600 and systemd-networkd will
  not start.

  $ ls -l /run/systemd/network
  total 4
  -rw------- 1 root root 152 May  2 14:14 10-netplan-eth0.network

  $ sudo systemctl start systemd-networkd      
  Job for systemd-networkd.service failed because the control process exited with error code.
  See "systemctl status systemd-networkd.service" and "journalctl -xe" for details.

  $ sudo journalctl -xe --no-pager --unit=systemd-networkd.service

  May 02 14:39:45 ubuntu1804 systemd[1]: Starting Network Service...
  -- Subject: Unit systemd-networkd.service has begun start-up
  -- Defined-By: systemd
  -- Support: http://www.ubuntu.com/support
  -- 
  -- Unit systemd-networkd.service has begun starting up.
  May 02 14:39:45 ubuntu1804 systemd-networkd[8724]: Could not load configuration files: Permission denied
  May 02 14:39:45 ubuntu1804 systemd[1]: systemd-networkd.service: Main process exited, code=exited, status=1/FAILURE
  May 02 14:39:45 ubuntu1804 systemd[1]: systemd-networkd.service: Failed with result 'exit-code'.
  May 02 14:39:45 ubuntu1804 systemd[1]: Failed to start Network Service.
  -- Subject: Unit systemd-networkd.service has failed
  -- Defined-By: systemd
  -- Support: http://www.ubuntu.com/support
  -- 
  -- Unit systemd-networkd.service has failed.

  
  If I modify the permissions, it will start fine.
  $ sudo chmod 0644 /run/systemd/network/*.network
  $ sudo systemctl start systemd-networkd
  $ sudo systemctl status systemd-networkd
  * systemd-networkd.service - Network Service
     Loaded: loaded (/lib/systemd/system/systemd-networkd.service; enabled; vendor preset: enabled)
     Active: active (running) since Wed 2018-05-02 14:43:20 UTC; 20s ago

  
  This is on Ubuntu 18.04 with netplan.io 0.36.1, which is being executed by cloud-init 18.2-14-g6d48d265-0ubuntu1.

  Thank you,
  Corey Melanson

To manage notifications about this bug go to:
https://bugs.launchpad.net/netplan/+bug/1768560/+subscriptions