Package: amanda-server
Version: 1:3.5.4-2
Severity: important

Dear Maintainer,

After upgrading from bookworm to trixie, any unreachable DLE accessed
over ssh will cause the planner to fail and the whole amdump job to fail
with MISSING status for every DLE.

Removing all offending DLEs from the disklist will let the amdump proceed correctly, including dumping DLEs reachable over ssh.

From that known working config, consider the following:

- Re-adding a single DLE for a host that is unreachable will again cause
  the planner to fail and the whole amdump to fail, with every DLE
  reporting MISSING.
  This is a regression from bookworm.

- Adding a DLE for an unresolvable hostname, with a bsdtcp dumptype will
  correctly report a problem with that DLE only, the amdump will proceed
  as expected.

- Switching the dumptype of that unresolvable hostname DLE to one with
  auth=ssh will again cause the planner to fail and the whole amdump to
  fail.

Those last 2 steps should provide an easy way to reproduce the bug.

end of the planner debug log:

Thu Aug 21 12:55:05.838597743 2025: pid 23653: thd-0x55f7b31ffd20: planner: security_stream_seterr(0x7f3208000ea0, SOCKET_EOF) Thu Aug 21 12:55:05.838722131 2025: pid 23653: thd-0x55f7b31ffd20: planner: security_seterror(handle=0x7f3208000b90, driver=0x7f320f0dd2c0 (SSH) error=EOF on read from failure-host) Thu Aug 21 12:55:05.838890713 2025: pid 23653: thd-0x55f7b35237e0: planner: make_socket opening socket with family 2 Thu Aug 21 12:55:05.838915702 2025: pid 23653: thd-0x55f7b31ffd20: planner: security_close(handle=0x7f3208000b90, driver=0x7f320f0dd2c0 (SSH)) Thu Aug 21 12:55:05.838956236 2025: pid 23653: thd-0x55f7b31ffd20: planner: security_stream_close(0x7f3208000ea0) Thu Aug 21 12:55:05.838974323 2025: pid 23653: thd-0x55f7b31ffd20: planner: security_stream_seterr(0x7f3208000ea0, write error to: Broken pipe) Thu Aug 21 12:55:05.838980868 2025: pid 23653: thd-0x55f7b35237e0: planner: make_socket opening socket with family 2: 15

Additionally, amcheck will exit early with a disklist containing
problematic ssh DLEs, without correctly reporting the problem. It will not output any "Amanda Backup Client Hosts Check" section, though the error "ssh: Could not resolve hostname failure-host: Name or service not known" will be in the server host check section.

From the amcheck log:

Thu Aug 21 14:10:26.865704522 2025: pid 24345: thd-0x55fce5fb4d20: amcheck-clients: security_stream_seterr(0x7f25d4000eb0, SOCKET_EOF) Thu Aug 21 14:10:26.865817464 2025: pid 24345: thd-0x55fce5fb4d20: amcheck-clients: security_seterror(handle=0x7f25d4000b90, driver=0x7f25da63a2c0 (SSH) error=EOF on read from failure-host) Thu Aug 21 14:10:26.867692353 2025: pid 24345: thd-0x55fce5fb4d20: amcheck-clients: new message: amcheck.c:2602:16:2800206 failure-host: selfcheck request failed: EOF on read from failure-host Thu Aug 21 14:10:26.867893331 2025: pid 24345: thd-0x55fce5fb4d20: amcheck-clients: Not value for key 'dle_hostname' in message ,
  {
    "source_filename" : "amcheck.c",
    "source_line" : "2602",
    "severity" : "error",
    "process" : "amcheck-clients",
    "running_on" : "amanda-server",
    "component" : "amanda",
    "module" : "amanda",
    "code" : "2800206",
    "hostname" : "failure-host",
    "errstr" : "EOF on read from failure-host",
"message" : "failure-host: selfcheck request failed: EOF on read from failure-host"
  }
Thu Aug 21 14:10:26.868087190 2025: pid 24345: thd-0x55fce5fb4d20: amcheck-clients: security_close(handle=0x7f25d4000b90, driver=0x7f25da63a2c0 (SSH)) Thu Aug 21 14:10:26.868119460 2025: pid 24345: thd-0x55fce5fb4d20: amcheck-clients: security_stream_close(0x7f25d4000eb0) Thu Aug 21 14:10:26.868204737 2025: pid 24345: thd-0x55fce5fb4d20: amcheck-clients: security_stream_seterr(0x7f25d4000eb0, write error to: Broken pipe)

Switching the offending DLE dumptype to a non ssh type will correctly produce the following output:

Amanda Backup Client Hosts Check
--------------------------------
ERROR: failure-host: selfcheck request failed: resolve_hostname(failure-host): Name or service not known

It will also report problems with other clients, which it didn't when
the problematic failure-host DLE was type=ssh.


-- System Information:
Debian Release: 13.0
  APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.41+deb13-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages amanda-server depends on:
ii  amanda-common      1:3.5.4-2
ii  bsd-mailx [mailx]  8.1.2-0.20220412cvs-1.1
ii  libc6              2.41-12
ii  libcurl4t64        8.14.1-2
ii  libglib2.0-0t64    2.84.3-1
ii  libjson-perl       4.10000-1
ii  perl               5.40.1-6

amanda-server recommends no packages.

Versions of packages amanda-server suggests:
ii  amanda-client  1:3.5.4-2
ii  cpio           2.15+dfsg-2
pn  gnuplot        <none>

-- no debconf information

Reply via email to