Your message dated Mon, 22 Jun 2026 20:38:16 +0000
with message-id <[email protected]>
and subject line Bug#1011533: fixed in chrony 4.8-4
has caused the Debian Bug report #1011533,
regarding chrony: if-up.d hook fails at boot when chronyd is still 
initializing, breaks networking.service
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1011533: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1011533
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: chrony
Version: 4.6.1-3+deb13u1
Severity: normal

The /etc/network/if-up.d/chrony hook can fail at boot when it runs
in the brief window between chronyd forking (creating
/run/chrony/chronyd.pid) and chronyd finishing initialization (opening
its command socket). In that window, `chronyc onoffline` returns
non-zero, `set -e` aborts the script before reaching `exit 0`, and
because ifup invokes if-up.d via `run-parts --exit-on-error`, the
whole ifup call fails. networking.service exits with status 1, the
interface is not registered in /run/network/ifstate, and no dhclient
daemon remains to handle DHCP renewals.

Current script (/etc/network/if-up.d/chrony):

    #!/bin/sh
    set -e
    [ -x /usr/sbin/chronyd ] || exit 0
    if [ -e /run/chrony/chronyd.pid ]; then
        chronyc onoffline > /dev/null 2>&1
    fi
    exit 0

The pid file exists during chronyd startup, so the guard does not
prevent the race. The `> /dev/null 2>&1` only suppresses output, not
the exit status, and `set -e` aborts on non-zero exits inside an
`if` body (only the condition itself is exempt).

This is a narrower variant of #868491 (fixed in 3.0-4+deb9u1 by
removing the chronyc `burst` call). The remaining `chronyc onoffline`
call has the same failure mode whenever chronyd is mid-startup.

Reproduction: intermittent race, occurred once in ~6 boots on a
Debian 13 (trixie) VMware VM (vmxnet3, chrony 4.6.1-3+deb13u1).
chrony.service and networking.service both start during basic.target,
and on the failing boot chronyd finished initialization ~7ms after
the if-up.d hook ran.

Relevant boot journal excerpt (timestamps abbreviated, May 14 01:50:48):

  .352  systemd: Starting chrony.service
  .449  dhclient: DHCPACK of 172.18.0.23
  .519  chronyd: chronyd version 4.6.1 starting
  .542  chronyd: Frequency read from /var/lib/chrony/chrony.drift
  .546  ifup[782]: run-parts: /etc/network/if-up.d/chrony exited with
return code 1
  .547  ifup[623]: ifup: failed to bring up eth0
  .553  systemd: Started chrony.service          <- chronyd ready 7ms too late
  .639  systemd: networking.service: Main process exited, status=1/FAILURE
  .702  systemd: Failed to start networking.service - Raise network interfaces.

Suggested fix: make the chronyc call non-fatal. chronyd's built-in
netlink monitoring picks up the route change shortly after anyway,
so the hook's nudge is best-effort.

--- /etc/network/if-up.d/chrony.orig
+++ /etc/network/if-up.d/chrony
@@ -4,7 +4,7 @@
 [ -x /usr/sbin/chronyd ] || exit 0

 if [ -e /run/chrony/chronyd.pid ]; then
-    chronyc onoffline > /dev/null 2>&1
+    chronyc onoffline > /dev/null 2>&1 || true
 fi

 exit 0

-- System Information:
Debian Release: 13 (trixie)
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.86+deb13-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian
6.12.86-1 (2026-05-08)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages chrony depends on:
ii  chrony  4.6.1-3+deb13u1

--- End Message ---
--- Begin Message ---
Source: chrony
Source-Version: 4.8-4
Done: Vincent Blut <[email protected]>

We believe that the bug you reported is fixed in the latest version of
chrony, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vincent Blut <[email protected]> (supplier of updated chrony package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 22 Jun 2026 16:52:45 +0200
Source: chrony
Architecture: source
Version: 4.8-4
Distribution: unstable
Urgency: medium
Maintainer: Vincent Blut <[email protected]>
Changed-By: Vincent Blut <[email protected]>
Closes: 1011533
Changes:
 chrony (4.8-4) unstable; urgency=medium
 .
   * debian/:
     - Bump dh compat to 14.
 .
   * debian/chrony.{if*,ppp*}:
     - Don't exit immediately if `chronyc onoffline` fails (Closes: #1011533)
     - Check for chronyd.sock instead of chronyd.pid. The existence of the PID
     file does not guarantee that the command socket is available.
 .
   * debian/control:
     - Bump Standards-Version to 4.7.4 (no changes required.)
 .
   * debian/copyright:
     - Update copyright year for debian/*.
Checksums-Sha1:
 3424c2c41ed1ca6731aec5eb82aee78ea502c2e2 2802 chrony_4.8-4.dsc
 bc633894516fc8e9458337bbe6a49e833817aa51 43420 chrony_4.8-4.debian.tar.xz
 f426ecaea22d94893ddc43e26c7827130fbbf66e 1237856 chrony_4.8-4.git.tar.xz
 4820d3f9bfe3622d8aaa8d906eddd4a2a16c3bfc 17476 chrony_4.8-4_source.buildinfo
Checksums-Sha256:
 1a02a81857569cd2f365121dbaa232d3544170335904ae9b9c447eeeb8fcc86d 2802 
chrony_4.8-4.dsc
 4a69bff1cac6918e6cc1883113e46624f3967070fe872e26cbc85598188d4e9b 43420 
chrony_4.8-4.debian.tar.xz
 076f7168f4e2b4d916d1c5291b648a1b0797ee63cffb6bbe4d8c0b21ce3b2800 1237856 
chrony_4.8-4.git.tar.xz
 762d13dda517c40a0990a5f1d18043f8d9d23bde942dc21a02c0bac822f27fff 17476 
chrony_4.8-4_source.buildinfo
Files:
 2b14eb08fe05faad06049fa75c57d771 2802 net optional chrony_4.8-4.dsc
 bceeecb994d3197452ab48503cd08e85 43420 net optional chrony_4.8-4.debian.tar.xz
 3f115a80432d1e6c356e91b1307f3bae 1237856 net None chrony_4.8-4.git.tar.xz
 e99bce5fdfaedf79ca9ac3f9ea7cc414 17476 net optional 
chrony_4.8-4_source.buildinfo
Git-Tag-Info: tag=b23624040aafce21c0e273dcc5f1e9afebd5f759 
fp=1b939355ac4c35cadfbd739c06a328e00c6ace15
Git-Tag-Tagger: Paul Gevers <[email protected]>

-----BEGIN PGP SIGNATURE-----
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=g1St
-----END PGP SIGNATURE-----

Attachment: pgpJdo7Z1pw6A.pgp
Description: PGP signature


--- End Message ---

Reply via email to