Package: amanda-server
Version: 1:3.5.4-2
Severity: important
Dear Maintainer,
After upgrading from bookworm to trixie, any unreachable DLE accessed
over ssh will cause the planner to fail and the whole amdump job to fail
with MISSING status for every DLE.
Removing all offending DLEs from the disklist will let the amdump
proceed correctly, including dumping DLEs reachable over ssh.
From that known working config, consider the following:
- Re-adding a single DLE for a host that is unreachable will again cause
the planner to fail and the whole amdump to fail, with every DLE
reporting MISSING.
This is a regression from bookworm.
- Adding a DLE for an unresolvable hostname, with a bsdtcp dumptype will
correctly report a problem with that DLE only, the amdump will proceed
as expected.
- Switching the dumptype of that unresolvable hostname DLE to one with
auth=ssh will again cause the planner to fail and the whole amdump to
fail.
Those last 2 steps should provide an easy way to reproduce the bug.
end of the planner debug log:
Thu Aug 21 12:55:05.838597743 2025: pid 23653: thd-0x55f7b31ffd20:
planner: security_stream_seterr(0x7f3208000ea0, SOCKET_EOF)
Thu Aug 21 12:55:05.838722131 2025: pid 23653: thd-0x55f7b31ffd20:
planner: security_seterror(handle=0x7f3208000b90, driver=0x7f320f0dd2c0
(SSH) error=EOF on read from failure-host)
Thu Aug 21 12:55:05.838890713 2025: pid 23653: thd-0x55f7b35237e0:
planner: make_socket opening socket with family 2
Thu Aug 21 12:55:05.838915702 2025: pid 23653: thd-0x55f7b31ffd20:
planner: security_close(handle=0x7f3208000b90, driver=0x7f320f0dd2c0 (SSH))
Thu Aug 21 12:55:05.838956236 2025: pid 23653: thd-0x55f7b31ffd20:
planner: security_stream_close(0x7f3208000ea0)
Thu Aug 21 12:55:05.838974323 2025: pid 23653: thd-0x55f7b31ffd20:
planner: security_stream_seterr(0x7f3208000ea0, write error to: Broken pipe)
Thu Aug 21 12:55:05.838980868 2025: pid 23653: thd-0x55f7b35237e0:
planner: make_socket opening socket with family 2: 15
Additionally, amcheck will exit early with a disklist containing
problematic ssh DLEs, without correctly reporting the problem. It will
not output any "Amanda Backup Client Hosts Check" section, though the
error "ssh: Could not resolve hostname failure-host: Name or service not
known" will be in the server host check section.
From the amcheck log:
Thu Aug 21 14:10:26.865704522 2025: pid 24345: thd-0x55fce5fb4d20:
amcheck-clients: security_stream_seterr(0x7f25d4000eb0, SOCKET_EOF)
Thu Aug 21 14:10:26.865817464 2025: pid 24345: thd-0x55fce5fb4d20:
amcheck-clients: security_seterror(handle=0x7f25d4000b90,
driver=0x7f25da63a2c0 (SSH) error=EOF on read from failure-host)
Thu Aug 21 14:10:26.867692353 2025: pid 24345: thd-0x55fce5fb4d20:
amcheck-clients: new message: amcheck.c:2602:16:2800206 failure-host:
selfcheck request failed: EOF on read from failure-host
Thu Aug 21 14:10:26.867893331 2025: pid 24345: thd-0x55fce5fb4d20:
amcheck-clients: Not value for key 'dle_hostname' in message ,
{
"source_filename" : "amcheck.c",
"source_line" : "2602",
"severity" : "error",
"process" : "amcheck-clients",
"running_on" : "amanda-server",
"component" : "amanda",
"module" : "amanda",
"code" : "2800206",
"hostname" : "failure-host",
"errstr" : "EOF on read from failure-host",
"message" : "failure-host: selfcheck request failed: EOF on read
from failure-host"
}
Thu Aug 21 14:10:26.868087190 2025: pid 24345: thd-0x55fce5fb4d20:
amcheck-clients: security_close(handle=0x7f25d4000b90,
driver=0x7f25da63a2c0 (SSH))
Thu Aug 21 14:10:26.868119460 2025: pid 24345: thd-0x55fce5fb4d20:
amcheck-clients: security_stream_close(0x7f25d4000eb0)
Thu Aug 21 14:10:26.868204737 2025: pid 24345: thd-0x55fce5fb4d20:
amcheck-clients: security_stream_seterr(0x7f25d4000eb0, write error to:
Broken pipe)
Switching the offending DLE dumptype to a non ssh type will correctly
produce the following output:
Amanda Backup Client Hosts Check
--------------------------------
ERROR: failure-host: selfcheck request failed:
resolve_hostname(failure-host): Name or service not known
It will also report problems with other clients, which it didn't when
the problematic failure-host DLE was type=ssh.
-- System Information:
Debian Release: 13.0
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.41+deb13-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages amanda-server depends on:
ii amanda-common 1:3.5.4-2
ii bsd-mailx [mailx] 8.1.2-0.20220412cvs-1.1
ii libc6 2.41-12
ii libcurl4t64 8.14.1-2
ii libglib2.0-0t64 2.84.3-1
ii libjson-perl 4.10000-1
ii perl 5.40.1-6
amanda-server recommends no packages.
Versions of packages amanda-server suggests:
ii amanda-client 1:3.5.4-2
ii cpio 2.15+dfsg-2
pn gnuplot <none>
-- no debconf information