Hello. Lately I've been having ever-increasing troubles trying to update my Debian GNU/Hurd installation. I'm not entirely sure if it's my system that's broken, or something's wrong with upstream Debian repositories (the latter appears to be more likely, though). Either way, the issues seem to be unrelated to the Hurd itself, and rather specific to Debian. And I'm not proficient in these things enough to figure it out myself.
The issue with sudo =================== To start off, I cannot use su or sudo to raise privileges: $ su su: Authentication failure $ sudo echo hi Sorry, try again. Sorry, try again. sudo: 3 incorrect password attempts Neither actually ever asks me for a password. Sudo's own troubleshooting FAQ has the following [0]: > Q) Sudo never gives me a chance to enter a password using PAM, it just > says 'Sorry, try again.' three times and exits. > A) You didn't setup PAM to work with sudo. On RedHat Linux or Fedora > Core this generally means installing the sample pam.conf file as > /etc/pam.d/sudo. See the example pam.conf file for hints on what to use > for other Linux systems. [0]: https://www.sudo.ws/troubleshooting.html I have definitely not messed with PAM on this system (at least, not intentionally). Both su and sudo used to work before some recent update, and I've verified that I see the same behavior on darnassus, so this does look like an upstream issue with what Debian ships. I can still log in as root directly, which gets me to the next issue: The issue with apt update ========================= Here are the relevant parts of my /etc/apt/sources.list: deb [trusted=yes] http://snapshot.debian.org/archive/debian-ports/20210812T100000Z/ sid main deb-src http://snapshot.debian.org/archive/debian/20210812T100000Z/ sid main deb [trusted=yes] https://snapshot.debian.org/archive/debian-ports/20210812T100000Z/ unreleased main deb http://ftp.ports.debian.org/debian-ports unstable main deb http://ftp.ports.debian.org/debian-ports experimental main deb http://ftp.ports.debian.org/debian-ports unreleased main deb http://deb.debian.org/debian-ports unstable main deb-src http://deb.debian.org/debian unstable main deb http://deb.debian.org/debian-ports experimental main deb-src http://deb.debian.org/debian experimental main deb http://deb.debian.org/debian-ports unreleased main deb-src http://deb.debian.org/debian unreleased main deb http://ftp.ports.debian.org/debian-ports unstable-debug main deb http://ftp.ports.debian.org/debian-ports experimental-debug main I'm unable to install debian-ports-archive-keyring, hence trusted=yes. And I admit to not really understanding how this works: the above snippet was mostly assembled using the "try things till it works" approach (except it doesn't work anymore). In particular, some of the entries I've scraped from this doc [1]. [1]: https://www.debian.org/ports/hurd/hurd-install This is what I see when I run apt update: # apt update Get:1 http://deb.debian.org/debian-ports unstable InRelease [55.3 kB] Hit:2 http://snapshot.debian.org/archive/debian-ports/20210812T100000Z sid InRelease Hit:3 http://ftp.ports.debian.org/debian-ports experimental InRelease Hit:4 http://deb.debian.org/debian unstable InRelease Hit:5 http://snapshot.debian.org/archive/debian/20210812T100000Z sid InRelease Hit:6 http://ftp.ports.debian.org/debian-ports unreleased InRelease Get:7 http://deb.debian.org/debian-ports experimental InRelease [55.3 kB] Ign:8 http://ftp.ports.debian.org/debian-ports unstable-debug InRelease Ign:9 http://ftp.ports.debian.org/debian-ports experimental-debug InRelease Hit:10 http://deb.debian.org/debian experimental InRelease Get:11 http://ftp.ports.debian.org/debian-ports unstable InRelease [55.3 kB] Get:12 http://deb.debian.org/debian-ports unreleased InRelease [56.6 kB] Get:13 https://snapshot.debian.org/archive/debian-ports/20210812T100000Z unreleased InRelease [56.6 kB] Ign:14 http://deb.debian.org/debian unreleased InRelease Err:15 http://ftp.ports.debian.org/debian-ports unstable-debug Release 404 Not Found [IP: 130.89.148.77 80] Err:16 http://deb.debian.org/debian unreleased Release 404 Not Found [IP: 151.101.86.132 80] Err:17 http://ftp.ports.debian.org/debian-ports experimental-debug Release 404 Not Found [IP: 130.89.148.77 80] Get:18 http://deb.debian.org/debian-ports unstable/main hurd-i386 Packages [18.9 MB] Err:6 http://ftp.ports.debian.org/debian-ports unreleased InRelease The following signatures were invalid: BADSIG 5A88D659DCB811BB Debian Ports Archive Automatic Signing Key (2021) <ftpmas...@ports-master.debian.org> Get:19 https://snapshot.debian.org/archive/debian-ports/20210812T100000Z unreleased/main hurd-i386 Packages [188 kB] Get:20 http://deb.debian.org/debian-ports unstable/main all Packages [9,323 kB] Get:21 http://deb.debian.org/debian-ports experimental/main hurd-i386 Packages [795 kB] Get:22 http://deb.debian.org/debian-ports experimental/main all Packages [464 kB] Get:23 http://deb.debian.org/debian-ports unreleased/main hurd-i386 Packages [159 kB] Get:24 http://ftp.ports.debian.org/debian-ports unstable/main hurd-i386 Packages [18.9 MB] Err:18 http://deb.debian.org/debian-ports unstable/main hurd-i386 Packages Hash Sum mismatch Hashes of expected file: - Filesize:77531148 [weak] - SHA512:c8108d738ef08afa9556ec395e0b8097e54f66347cce924303b6294dcfa32a4a3853b29597902372562542c7b73ca364be44234d3c0b709e992ad19fa6b566a2 - SHA256:06de0c824e0ff3e683a5698ebd63892c34f264eff7d311a7e3a225dd894f8457 - SHA1:4b881bd3628a18f0917b55349563fe6a95f25887 [weak] - MD5Sum:65d941cde7d7279bbecfe22c67ff40fa [weak] Hashes of received file: - SHA512:9fae8af5d37a72f3410c9c0c70d75c4677b9ee8933bd3a05c8cb20e59430f7b56fb060b6d0cba41a20ac0e7d878cd447a6936b740ffc3536b74afe0fd31d90bb - SHA256:06de0c824e0ff3e683a5698ebd63892c34f264eff7d311a7e3a225dd894f8457 - SHA1:4b881bd3628a18f0917b55349563fe6a95f25887 [weak] - MD5Sum:65d941cde7d7279bbecfe22c67ff40fa [weak] - Filesize:77531148 [weak] Last modification reported: Thu, 30 Sep 2021 07:23:09 +0000 Release file created at: Thu, 30 Sep 2021 07:40:38 +0000 Err:19 https://snapshot.debian.org/archive/debian-ports/20210812T100000Z unreleased/main hurd-i386 Packages Hash Sum mismatch Hashes of expected file: - Filesize:755398 [weak] - SHA512:830bbee3f0a649701c3a5b55871d4936c4cc45fdd666e6800264e5c365f65af11af1489b5155e87f12d172923c1f7671b6bda3060a452ea3459f3229cabf1eba - SHA256:9a24ed717113ab571a5e5b4d0c260856f3fcd79a9a04bd667da9e8b4ae768b40 - SHA1:43aec500d242311ea4f7392fda5d6dd78b458437 [weak] - MD5Sum:a0d2abb78827691baaa96835c45711f3 [weak] Hashes of received file: - SHA512:513653e475542d5652a419480700336b476f110e7dfbf438982f1d7361b231818c069fdd4fb970a47c08330234dc182c2cc9c5f9f8de13fe94be092086e5b9c2 - SHA256:9a24ed717113ab571a5e5b4d0c260856f3fcd79a9a04bd667da9e8b4ae768b40 - SHA1:43aec500d242311ea4f7392fda5d6dd78b458437 [weak] - MD5Sum:a0d2abb78827691baaa96835c45711f3 [weak] - Filesize:755398 [weak] Last modification reported: Wed, 11 Aug 2021 02:01:50 +0000 Release file created at: Thu, 12 Aug 2021 07:29:40 +0000 Err:21 http://deb.debian.org/debian-ports experimental/main hurd-i386 Packages Hash Sum mismatch Hashes of expected file: - Filesize:3675782 [weak] - SHA512:cbc3ef2bba3c0e5d24bad319160d81437d9622458de2a805f966005127e3125a72e3dec069ca0c8caa3037e6665ecfe7e572dd2bdf2a678d9e4e0a9add347347 - SHA256:c906ca5c09b7fb98508962c595bbcc9174da517521cc2d2c5d6f0e91abecb534 - SHA1:0b0cb5e5042a82a00064ce8c1f9d454ff53c1822 [weak] - MD5Sum:342c054c5ff9b8129e35f45cbd6b9c06 [weak] Hashes of received file: - SHA512:02e05e3a74aa854ff28401a4cb971cfca4e63016390c68b1fec9a8c3b2ed43526cebfed598d694b8fb48f196d85aac1176e791eb1fbeab797a41fd3ca5d2ea3e - SHA256:c906ca5c09b7fb98508962c595bbcc9174da517521cc2d2c5d6f0e91abecb534 - SHA1:0b0cb5e5042a82a00064ce8c1f9d454ff53c1822 [weak] - MD5Sum:342c054c5ff9b8129e35f45cbd6b9c06 [weak] - Filesize:3675782 [weak] Last modification reported: Thu, 30 Sep 2021 07:39:43 +0000 Release file created at: Thu, 30 Sep 2021 07:41:07 +0000 Err:22 http://deb.debian.org/debian-ports experimental/main all Packages Err:23 http://deb.debian.org/debian-ports unreleased/main hurd-i386 Packages Hash Sum mismatch Hashes of expected file: - Filesize:659166 [weak] - SHA512:52a7aab50f21dc02224b53fbd63db25f283ce5270e7c8cfdd8145a406c12fa69321c0fa03fdc2b647ad8c27d9c911f72890841fb6fdfa420a49cd8ad13bbec6f - SHA256:1725ce5414bdef5adabd725caca33af1253ffa0405122c2c3715c39e500648a5 - SHA1:8767c794a044244d6baa35c3dbe4f3697221da07 [weak] - MD5Sum:2820433296bbc691ac90b281bf9216d2 [weak] Hashes of received file: - SHA512:2f9f9e5a1dfbae4ad624ead36e53f29192e0cc89d90d5f659ac330989560b2e6b822de820c54349c3a2d2e90d3d524ac902f6cadffa6ce888a6211979fd95553 - SHA256:1725ce5414bdef5adabd725caca33af1253ffa0405122c2c3715c39e500648a5 - SHA1:8767c794a044244d6baa35c3dbe4f3697221da07 [weak] - MD5Sum:2820433296bbc691ac90b281bf9216d2 [weak] - Filesize:659166 [weak] Last modification reported: Tue, 28 Sep 2021 06:10:47 +0000 Release file created at: Thu, 30 Sep 2021 07:41:06 +0000 Get:25 http://ftp.ports.debian.org/debian-ports unstable/main all Packages [9,323 kB] Reading package lists... Done E: The repository 'http://ftp.ports.debian.org/debian-ports unstable-debug Release' does not have a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. E: The repository 'http://deb.debian.org/debian unreleased Release' does not have a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. E: The repository 'http://ftp.ports.debian.org/debian-ports experimental-debug Release' does not have a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.ports.debian.org/debian-ports unreleased InRelease: The following signatures were invalid: BADSIG 5A88D659DCB811BB Debian Ports Archive Automatic Signing Key (2021) <ftpmas...@ports-master.debian.org> I'm primarily concerned about the hashsum check failures. In all of the cases, filesize, md5, sha1, and sha256 seem to match, but sha512 differs between expected and received. I can't really imagine how this could be possible unless sha512 was just computed incorrectly either remotely or locally. I've searched for similar issues online, and the one advice people give is: /var/lib/apt/lists/partial/ must be corrupted, run apt clean (or: just wipe /var/lib/apt/lists/partial/) and try again. I've tried both methods of cleaning, and neither helped. It's worth stressing that this issue is also (somewhat) new; apt used to work flawlessly before on this same system. The issue with debootstrap, part 1 ================================== To check if the previous issue is my system being in a messed up state, I've tried to bootstrap a subhurd, to check if everything would work cleanly there. Again, I've successfully used debootstrap to create subhurds on this same system before. The Hurd wiki page on subhurds [2] suggests the following command: debootstrap sid mnt/ http://httpredir.debian.org/debian [2]: https://www.gnu.org/software/hurd/hurd/subhurd.html which doesn't work (seemingly because hurd-i386 is gone from httpredir.debian.org), so I adapted it to: # debootstrap --no-check-gpg sid /mnt/subhurd/ http://snapshot.debian.org/archive/debian-ports/20210812T100000Z/ (When I had debian-ports-archive-keyring installed, I've used something like --keyring=/usr/share/keyrings/debian-ports-archive-keyring.gpg instead of --no-check-gpg, to actually verify the packages being downloaded.) This starts downloading packages, and then errors out at: I: Retrieving libgcc-s1 10.2.1-6 I: Validating libgcc-s1 10.2.1-6 W: Retrying failed download of http://snapshot.debian.org/archive/debian-ports/20210812T100000Z/pool-hurd-i386/main/g/gcc-10/libgcc-s1_10.2.1-6_hurd-i386.deb W: http://snapshot.debian.org/archive/debian-ports/20210812T100000Z/pool-hurd-i386/main/g/gcc-10/libgcc-s1_10.2.1-6_hurd-i386.deb was corrupt W: Couldn't download package libgcc-s1 (ver 10.2.1-6 arch hurd-i386) at http://snapshot.debian.org/archive/debian-ports/20210812T100000Z/pool-hurd-i386/main/g/gcc-10/libgcc-s1_10.2.1-6_hurd-i386.deb then later the same thing for libstdc++6; the rest of the packages get downloaded successfully and pass the validation. That surely looks like something's broken about the repos, and not in my system! The issue with debootstrap, part 2 ================================== If I attempt to use the latest packages instead of the 20210812 snapshot, namely # debootstrap --no-check-gpg sid /mnt/subhurd/ http://deb.debian.org/debian-ports I get a different error. It succeeds at downloading and verifying packages, and errors out at: I: Configuring libc-bin... W: Failure while configuring base packages. This will be re-attempted up to five times. W: See /mnt/subhurd/debootstrap/debootstrap.log for details (possibly the package rsyslog is at fault) The log contains the following: Processing triggers for libc-bin (2.32-4) ... Errors were encountered while processing: rsyslog dpkg: dependency problems prevent configuration of rsyslog: rsyslog depends on libjson-c3 (>= 0.10); however: Package libjson-c3 is not installed. rsyslog depends on liblogging-stdlog0 (>= 1.0.2); however: Package liblogging-stdlog0 is not installed. rsyslog depends on liblognorm2 (>= 1.1.2); however: Package liblognorm2 is not installed. dpkg: error processing package rsyslog (--configure): dependency problems - leaving unconfigured Errors were encountered while processing: rsyslog dpkg: dependency problems prevent configuration of rsyslog: rsyslog depends on libjson-c3 (>= 0.10); however: Package libjson-c3 is not installed. rsyslog depends on liblogging-stdlog0 (>= 1.0.2); however: Package liblogging-stdlog0 is not installed. rsyslog depends on liblognorm2 (>= 1.1.2); however: Package liblognorm2 is not installed. And that, again, seems to be an issue with the repos rather than with my system. Could somebody more Debian-proficient please take a look? Am I doing things horribly wrong? Can you reproduce this on your systems? Anyone? Sergey