[Bug 1382842] [NEW] Security update breaks pacemaker in 14.04
Ante Karamatić
ante.karamatic at canonical.com
Sat Oct 18 18:59:38 UTC 2014
Public bug reported:
Ubuntu 14.04
If system is running with pacemaker from the archive:
$ dpkg -l | grep 1.1.10+git20130802-1ubuntu2
ii libcib3 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - CIB
ii libcrmcluster4 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - CRM
ii libcrmcommon3 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - common CRM
ii libcrmservice1 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - crmservice
ii liblrmd1 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - lrmd
ii libpe-rules2 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - rules for P-Engine
ii libpe-status4 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - status for P-Engine
ii libpengine4 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - P-Engine
ii libstonithd2 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - stonith
ii libtransitioner2 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - transitioner
ii pacemaker 1.1.10+git20130802-1ubuntu2 amd64 HA cluster resource manager
ii pacemaker-cli-utils 1.1.10+git20130802-1ubuntu2 amd64 Command line interface utilities for Pacemaker
$ sudo crm status
Last updated: Sat Oct 18 20:52:32 2014
Last change: Sat Oct 18 20:51:28 2014 via crmd on saturn
Stack: corosync
Current DC: saturn (2130706433) - partition with quorum
Version: 1.1.10-42f2063
1 Nodes configured
0 Resources configured
Online: [ saturn ]
And then one installs pacemaker (which pulls in pacemaker from
-security):
$ sudo apt-get install pacemaker
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
libccrtp0 libdbus-c++-1-0 libucommon6 libyate5.0.0 libzrtpcpp2
Use 'apt-get autoremove' to remove them.
The following packages will be upgraded:
pacemaker
1 upgraded, 0 newly installed, 0 to remove and 59 not upgraded.
Need to get 364 kB of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 http://hr.archive.ubuntu.com/ubuntu/ trusty-updates/main pacemaker amd64 1.1.10+git20130802-1ubuntu2.1 [364 kB]
Fetched 364 kB in 1s (197 kB/s)
(Reading database ... 638230 files and directories currently installed.)
Preparing to unpack .../pacemaker_1.1.10+git20130802-1ubuntu2.1_amd64.deb ...
Unpacking pacemaker (1.1.10+git20130802-1ubuntu2.1) over (1.1.10+git20130802-1ubuntu2) ...
Processing triggers for man-db (2.6.7.1-1ubuntu1) ...
Processing triggers for ureadahead (0.100.0-16) ...
Setting up pacemaker (1.1.10+git20130802-1ubuntu2.1) ...
addgroup: The group `haclient' already exists as a system group. Exiting.
Warning: The home dir /var/lib/heartbeat you specified already exists.
The system user `hacluster' already exists. Exiting.
Restarting pacemaker results in havoc:
$ sudo /etc/init.d/pacemaker stop
Signaling Pacemaker Cluster Manager to terminate: [ OK ]
Waiting for cluster services to unload:^[[A.[ OK ]
$ sudo /etc/init.d/pacemaker start
Starting Pacemaker Cluster Manager: [ OK ]
$ sudo crm status
Last updated: Sat Oct 18 20:54:03 2014
Last change: Sat Oct 18 20:51:28 2014 via crmd on saturn
Stack: corosync
Current DC: NONE
1 Nodes configured
0 Resources configured
Node saturn (2130706433): UNCLEAN (offline)
>From the syslog:
Oct 18 20:54:16 saturn crmd[23424]: warning: do_lrm_control: Failed to sign on to the LRM 2 (30 max) times
Oct 18 20:54:16 saturn crmd[23424]: warning: do_lrm_control: Failed to sign on to the LRM 3 (30 max) times
Oct 18 20:54:16 saturn crmd[23424]: warning: do_lrm_control: Failed to sign on to the LRM 4 (30 max) times
This is because pacemaker package depends on wrong library versions:
Package: pacemaker
Priority: optional
Section: admin
Installed-Size: 1564
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Original-Maintainer: Debian HA Maintainers <debian-ha-maintainers at lists.alioth.debian.org>
Architecture: amd64
Version: 1.1.10+git20130802-1ubuntu2.1
Replaces: pacemaker-heartbeat, pacemaker-openais
Depends: libc6 (>= 2.14), libcfg6 (>= 2.3.0), libcib3 (>= 1.1.10+git20130802), libcmap4 (>= 2.3.0), libcorosync-common4 (>= 2.3.0), libcrmcluster4 (>= 1.1.10+git20130802), libcrmcommon3 (>= 1.1.10+git20130802), libcrmservice1 (>= 1.1.10+git20130802), libglib2.0-0 (>= 2.28.0), libgnutls26 (>= 2.12.17-0), liblrmd1 (>= 1.1.10+git20130802), libpam0g (>= 0.99.7.1), libpe-rules2 (>= 1.1.10+git20130802), libpe-status4 (>= 1.1.10+git20130802), libpengine4 (>= 1.1.10+git20130802), libplumb2 (>= 1.0.11+hg2754), libqb0, libstonithd2 (>= 1.1.10+git20130802), libtransitioner2 (>= 1.1.10+git20130802), python (>= 2.7), python (<< 2.8), python:any (>= 2.7.1-0ubuntu2), libheartbeat2, resource-agents, adduser, corosync (>= 1.4.4-1) | heartbeat (>= 3.0), crmsh, pacemaker-cli-utils
Conflicts: pacemaker-heartbeat, pacemaker-openais
If now one updates libraries:
$ sudo apt-get install libcib3=1.1.10+git20130802-1ubuntu2.1
libcrmcluster4=1.1.10+git20130802-1ubuntu2.1
libcrmcommon3=1.1.10+git20130802-1ubuntu2.1
libcrmservice1=1.1.10+git20130802-1ubuntu2.1
liblrmd1=1.1.10+git20130802-1ubuntu2.1 libpe-
rules2=1.1.10+git20130802-1ubuntu2.1 libpe-
status4=1.1.10+git20130802-1ubuntu2.1
libpengine4=1.1.10+git20130802-1ubuntu2.1
libstonithd2=1.1.10+git20130802-1ubuntu2.1
libtransitioner2=1.1.10+git20130802-1ubuntu2.1 pacemaker-cli-
utils=1.1.10+git20130802-1ubuntu2.1
And restarts pacemaker:
$ sudo /etc/init.d/pacemaker stop
Signaling Pacemaker Cluster Manager to terminate: [ OK ]
Waiting for cluster services to unload:[ OK ]
$ sudo /etc/init.d/pacemaker start
Starting Pacemaker Cluster Manager: [ OK ]
Cluster eventually resolves the problem:
$ sudo crm status
Last updated: Sat Oct 18 20:58:21 2014
Last change: Sat Oct 18 20:55:48 2014 via crmd on saturn
Stack: corosync
Current DC: saturn (2130706433) - partition with quorum
Version: 1.1.10-42f2063
1 Nodes configured
0 Resources configured
Online: [ saturn ]
And error messages from syslog are gone.
Pacemaker binary package should always depend on exact version of
libraries its using.
** Affects: pacemaker (Ubuntu)
Importance: Undecided
Status: New
** Tags: cts
** Tags added: cts
** Description changed:
Ubuntu 14.04
If system is running with pacemaker from the archive:
$ dpkg -l | grep 1.1.10+git20130802-1ubuntu2
ii libcib3 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - CIB
ii libcrmcluster4 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - CRM
ii libcrmcommon3 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - common CRM
ii libcrmservice1 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - crmservice
ii liblrmd1 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - lrmd
ii libpe-rules2 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - rules for P-Engine
ii libpe-status4 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - status for P-Engine
ii libpengine4 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - P-Engine
ii libstonithd2 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - stonith
ii libtransitioner2 1.1.10+git20130802-1ubuntu2 amd64 Pacemaker libraries - transitioner
ii pacemaker 1.1.10+git20130802-1ubuntu2 amd64 HA cluster resource manager
ii pacemaker-cli-utils 1.1.10+git20130802-1ubuntu2 amd64 Command line interface utilities for Pacemaker
$ sudo crm status
Last updated: Sat Oct 18 20:52:32 2014
Last change: Sat Oct 18 20:51:28 2014 via crmd on saturn
Stack: corosync
Current DC: saturn (2130706433) - partition with quorum
Version: 1.1.10-42f2063
1 Nodes configured
0 Resources configured
-
Online: [ saturn ]
And then one installs pacemaker (which pulls in pacemaker from
-security):
$ sudo apt-get install pacemaker
Reading package lists... Done
- Building dependency tree
+ Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
- libccrtp0 libdbus-c++-1-0 libucommon6 libyate5.0.0 libzrtpcpp2
+ libccrtp0 libdbus-c++-1-0 libucommon6 libyate5.0.0 libzrtpcpp2
Use 'apt-get autoremove' to remove them.
The following packages will be upgraded:
- pacemaker
+ pacemaker
1 upgraded, 0 newly installed, 0 to remove and 59 not upgraded.
Need to get 364 kB of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 http://hr.archive.ubuntu.com/ubuntu/ trusty-updates/main pacemaker amd64 1.1.10+git20130802-1ubuntu2.1 [364 kB]
- Fetched 364 kB in 1s (197 kB/s)
+ Fetched 364 kB in 1s (197 kB/s)
(Reading database ... 638230 files and directories currently installed.)
Preparing to unpack .../pacemaker_1.1.10+git20130802-1ubuntu2.1_amd64.deb ...
Unpacking pacemaker (1.1.10+git20130802-1ubuntu2.1) over (1.1.10+git20130802-1ubuntu2) ...
Processing triggers for man-db (2.6.7.1-1ubuntu1) ...
Processing triggers for ureadahead (0.100.0-16) ...
Setting up pacemaker (1.1.10+git20130802-1ubuntu2.1) ...
addgroup: The group `haclient' already exists as a system group. Exiting.
Warning: The home dir /var/lib/heartbeat you specified already exists.
The system user `hacluster' already exists. Exiting.
Restarting pacemaker results in havoc:
$ sudo /etc/init.d/pacemaker stop
Signaling Pacemaker Cluster Manager to terminate: [ OK ]
Waiting for cluster services to unload:^[[A.[ OK ]
$ sudo /etc/init.d/pacemaker start
Starting Pacemaker Cluster Manager: [ OK ]
$ sudo crm status
Last updated: Sat Oct 18 20:54:03 2014
Last change: Sat Oct 18 20:51:28 2014 via crmd on saturn
Stack: corosync
Current DC: NONE
1 Nodes configured
0 Resources configured
-
Node saturn (2130706433): UNCLEAN (offline)
From the syslog:
Oct 18 20:54:16 saturn crmd[23424]: warning: do_lrm_control: Failed to sign on to the LRM 2 (30 max) times
Oct 18 20:54:16 saturn crmd[23424]: warning: do_lrm_control: Failed to sign on to the LRM 3 (30 max) times
Oct 18 20:54:16 saturn crmd[23424]: warning: do_lrm_control: Failed to sign on to the LRM 4 (30 max) times
This is because pacemaker package depends on wrong library versions:
Package: pacemaker
Priority: optional
Section: admin
Installed-Size: 1564
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Original-Maintainer: Debian HA Maintainers <debian-ha-maintainers at lists.alioth.debian.org>
Architecture: amd64
- Version: 1.1.10+git20130802-1ubuntu2
+ Version: 1.1.10+git20130802-1ubuntu2.1
Replaces: pacemaker-heartbeat, pacemaker-openais
Depends: libc6 (>= 2.14), libcfg6 (>= 2.3.0), libcib3 (>= 1.1.10+git20130802), libcmap4 (>= 2.3.0), libcorosync-common4 (>= 2.3.0), libcrmcluster4 (>= 1.1.10+git20130802), libcrmcommon3 (>= 1.1.10+git20130802), libcrmservice1 (>= 1.1.10+git20130802), libglib2.0-0 (>= 2.28.0), libgnutls26 (>= 2.12.17-0), liblrmd1 (>= 1.1.10+git20130802), libpam0g (>= 0.99.7.1), libpe-rules2 (>= 1.1.10+git20130802), libpe-status4 (>= 1.1.10+git20130802), libpengine4 (>= 1.1.10+git20130802), libplumb2 (>= 1.0.11+hg2754), libqb0, libstonithd2 (>= 1.1.10+git20130802), libtransitioner2 (>= 1.1.10+git20130802), python (>= 2.7), python (<< 2.8), python:any (>= 2.7.1-0ubuntu2), libheartbeat2, resource-agents, adduser, corosync (>= 1.4.4-1) | heartbeat (>= 3.0), crmsh, pacemaker-cli-utils
Conflicts: pacemaker-heartbeat, pacemaker-openais
If now one updates libraries:
$ sudo apt-get install libcib3=1.1.10+git20130802-1ubuntu2.1
libcrmcluster4=1.1.10+git20130802-1ubuntu2.1
libcrmcommon3=1.1.10+git20130802-1ubuntu2.1
libcrmservice1=1.1.10+git20130802-1ubuntu2.1
liblrmd1=1.1.10+git20130802-1ubuntu2.1 libpe-
rules2=1.1.10+git20130802-1ubuntu2.1 libpe-
status4=1.1.10+git20130802-1ubuntu2.1
libpengine4=1.1.10+git20130802-1ubuntu2.1
libstonithd2=1.1.10+git20130802-1ubuntu2.1
libtransitioner2=1.1.10+git20130802-1ubuntu2.1 pacemaker-cli-
utils=1.1.10+git20130802-1ubuntu2.1
And restarts pacemaker:
$ sudo /etc/init.d/pacemaker stop
Signaling Pacemaker Cluster Manager to terminate: [ OK ]
Waiting for cluster services to unload:[ OK ]
$ sudo /etc/init.d/pacemaker start
Starting Pacemaker Cluster Manager: [ OK ]
Cluster eventually resolves the problem:
$ sudo crm status
Last updated: Sat Oct 18 20:58:21 2014
Last change: Sat Oct 18 20:55:48 2014 via crmd on saturn
Stack: corosync
Current DC: saturn (2130706433) - partition with quorum
Version: 1.1.10-42f2063
1 Nodes configured
0 Resources configured
-
Online: [ saturn ]
And error messages from syslog are gone.
Pacemaker binary package should always depend on exact version of
libraries its using.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to pacemaker in Ubuntu.
https://bugs.launchpad.net/bugs/1382842
Title:
Security update breaks pacemaker in 14.04
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pacemaker/+bug/1382842/+subscriptions
More information about the Ubuntu-server-bugs
mailing list