Your message dated Tue, 21 Apr 2020 19:18:59 +0000
with message-id <e1jqyq7-000akn...@fasolo.debian.org>
and subject line Bug#954240: fixed in influxdb 1.6.4-2
has caused the Debian Bug report #954240,
regarding influxdb: Package installation fails if User "influxdb" is not stored
locally (e.g. from LDAP)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
954240: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954240
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: influxdb
Version: 1.6.4-1+b22
Severity: normal
Tags: patch
Good day .*.
The installation of the influxdb package fails if the service user
"influxdb" is not present in /etc/passwd but is defined externally,
e.g. in a central LDAP directory (OpenLDAP, 389-dc, ...) or even NIS/NIS+, ...
The postinstallation script looks for the user in /etc/passwd:
[...]
# create an influxdb group and user
if ! grep -q influxdb /etc/passwd; then
[...]
and tries to add the account if it not present in this file.
If the account is stored in externally (LDAP,NIS, ...) the
postinst script tries to add the user and will fail, because
the system is able to resolve the account name and UID.
In an "containerized" (e.g. LXC) environment with a central storage
for the InfluxDB data the useraccounts are usually managed in a
central location.
Solution:
In the file influxdb.postinst the lookup in /etc/passwd should be
replaced by "getent passwd ...":
------------------>8------------------
--- influxdb.postinst.original 2020-03-19 07:35:05.264027783 +0100
+++ influxdb.postinst 2020-03-19 07:35:06.224028230 +0100
@@ -21,7 +21,7 @@
case "$1" in
configure|reconfigure)
# create an influxdb group and user
- if ! grep -q influxdb /etc/passwd; then
+ if ! getent passwd influxdb >/dev/null 2>/dev/null; then
adduser --system --home /var/lib/influxdb --no-create-home influxdb
addgroup --system influxdb
adduser influxdb influxdb
------------------8<------------------
So long,
Andreas.
-- System Information:
Debian Release: 10.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-8-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages influxdb depends on:
ii adduser 3.118
ii libc6 2.28-10
ii lsb-base 10.2019051400
influxdb recommends no packages.
influxdb suggests no packages.
-- Configuration Files:
/etc/influxdb/influxdb.conf changed:
reporting-enabled = false
bind-address = "127.0.0.1:8088"
[meta]
# Where the metadata/raft database is stored
dir = "/var/lib/influxdb/meta"
# Automatically create a default retention policy when creating a database.
retention-autocreate = true
# If log messages are printed for the meta service
logging-enabled = true
[data]
# The directory where the TSM storage engine stores TSM files.
dir = "/var/lib/influxdb/data"
# The directory where the TSM storage engine stores WAL files.
wal-dir = "/var/lib/influxdb/wal"
# The amount of time that a write will wait before fsyncing. A duration
# greater than 0 can be used to batch up multiple fsync calls. This is
useful for slower
# disks or when WAL write contention is seen. A value of 0s fsyncs every
write to the WAL.
# Values in the range of 0-100ms are recommended for non-SSD disks.
wal-fsync-delay = "100ms"
# The type of shard index to use for new shards. The default is an in-memory
index that is
# recreated at startup. A value of "tsi1" will use a disk based index that
supports higher
# cardinality datasets.
index-version = "inmem"
# Trace logging provides more verbose output around the tsm engine. Turning
# this on can provide more useful output for debugging tsm engine issues.
# trace-logging-enabled = false
# Whether queries should be logged before execution. Very useful for
troubleshooting, but will
# log any sensitive data contained within a query.
query-log-enabled = false
# Settings for the TSM engine
# CacheMaxMemorySize is the maximum size a shard's cache can
# reach before it starts rejecting writes.
# Valid size suffixes are k, m, or g (case insensitive, 1024 = 1k).
# Values without a size suffix are in bytes.
# cache-max-memory-size = "1g"
# CacheSnapshotMemorySize is the size at which the engine will
# snapshot the cache and write it to a TSM file, freeing up memory
# Valid size suffixes are k, m, or g (case insensitive, 1024 = 1k).
# Values without a size suffix are in bytes.
# cache-snapshot-memory-size = "25m"
# CacheSnapshotWriteColdDuration is the length of time at
# which the engine will snapshot the cache and write it to
# a new TSM file if the shard hasn't received writes or deletes
# cache-snapshot-write-cold-duration = "10m"
# CompactFullWriteColdDuration is the duration at which the engine
# will compact all TSM files in a shard if it hasn't received a
# write or delete
# compact-full-write-cold-duration = "4h"
# The maximum number of concurrent full and level compactions that can run at
one time. A
# value of 0 results in 50% of runtime.GOMAXPROCS(0) used at runtime. Any
number greater
# than 0 limits compactions to that value. This setting does not apply
# to cache snapshotting.
# max-concurrent-compactions = 0
# The threshold, in bytes, when an index write-ahead log file will compact
# into an index file. Lower sizes will cause log files to be compacted more
# quickly and result in lower heap usage at the expense of write throughput.
# Higher sizes will be compacted less frequently, store more series in-memory,
# and provide higher write throughput.
# Valid size suffixes are k, m, or g (case insensitive, 1024 = 1k).
# Values without a size suffix are in bytes.
# max-index-log-file-size = "1m"
# The maximum series allowed per database before writes are dropped. This
limit can prevent
# high cardinality issues at the database level. This limit can be disabled
by setting it to
# 0.
# max-series-per-database = 1000000
# The maximum number of tag values per tag that are allowed before writes are
dropped. This limit
# can prevent high cardinality tag values from being written to a
measurement. This limit can be
# disabled by setting it to 0.
# max-values-per-tag = 100000
# If true, then the mmap advise value MADV_WILLNEED will be provided to the
kernel with respect to
# TSM files. This setting has been found to be problematic on some kernels,
and defaults to off.
# It might help users who have slow disks in some cases.
# tsm-use-madv-willneed = false
[coordinator]
# The default time a write request will wait until a "timeout" error is
returned to the caller.
# write-timeout = "10s"
# The maximum number of concurrent queries allowed to be executing at one
time. If a query is
# executed and exceeds this limit, an error is returned to the caller. This
limit can be disabled
# by setting it to 0.
# max-concurrent-queries = 0
# The maximum time a query will is allowed to execute before being killed by
the system. This limit
# can help prevent run away queries. Setting the value to 0 disables the
limit.
# query-timeout = "0s"
# The time threshold when a query will be logged as a slow query. This limit
can be set to help
# discover slow or resource intensive queries. Setting the value to 0
disables the slow query logging.
# log-queries-after = "0s"
# The maximum number of points a SELECT can process. A value of 0 will make
# the maximum point count unlimited. This will only be checked every second
so queries will not
# be aborted immediately when hitting the limit.
# max-select-point = 0
# The maximum number of series a SELECT can run. A value of 0 will make the
maximum series
# count unlimited.
# max-select-series = 0
# The maxium number of group by time bucket a SELECT can create. A value of
zero will max the maximum
# number of buckets unlimited.
# max-select-buckets = 0
[retention]
# Determines whether retention policy enforcement enabled.
enabled = true
# The interval of time when retention policy enforcement checks run.
check-interval = "3600m"
[shard-precreation]
# Determines whether shard pre-creation service is enabled.
enabled = true
# The interval of time when the check to pre-create new shards runs.
check-interval = "10m"
# The default period ahead of the endtime of a shard group that its successor
# group is created.
advance-period = "30m"
[monitor]
# Whether to record statistics internally.
store-enabled = true
# The destination database for recorded statistics
store-database = "_internal"
# The interval at which to record statistics
store-interval = "300s"
[http]
# Determines whether HTTP endpoint is enabled.
enabled = true
# The bind address used by the HTTP service.
# bind-address = "localhost:8086"
bind-address = "[fd33:64e1:dd0d:9d95:4e7:1663:e620:839f]:8086"
# Determines whether user authentication is enabled over HTTP/HTTPS.
# auth-enabled = false
# The default realm sent back when issuing a basic auth challenge.
# realm = "InfluxDB"
# Determines whether HTTP request logging is enabled.
log-enabled = false
# Determines whether the HTTP write request logs should be suppressed when
the log is enabled.
suppress-write-log = true
# When HTTP request logging is enabled, this option specifies the path where
# log entries should be written. If unspecified, the default is to write to
stderr, which
# intermingles HTTP logs with internal InfluxDB logging.
#
# If influxd is unable to access the specified path, it will log an error and
fall back to writing
# the request log to stderr.
# access-log-path = ""
# Determines whether detailed write logging is enabled.
write-tracing = false
# Determines whether the pprof endpoint is enabled. This endpoint is used for
# troubleshooting and monitoring.
pprof-enabled = false
# Enables a pprof endpoint that binds to localhost:6060 immediately on
startup.
# This is only needed to debug startup issues.
debug-pprof-enabled = false
# Determines whether HTTPS is enabled.
https-enabled = false
# The SSL certificate to use when HTTPS is enabled.
# https-certificate = "/etc/ssl/influxdb.pem"
# Use a separate private key location.
# https-private-key = ""
# The JWT auth shared secret to validate requests using JSON web tokens.
# shared-secret = ""
# The default chunk size for result sets that should be chunked.
# max-row-limit = 0
# The maximum number of HTTP connections that may be open at once. New
connections that
# would exceed this limit are dropped. Setting this value to 0 disables the
limit.
# max-connection-limit = 0
# Enable http service over unix domain socket
unix-socket-enabled = true
# The path of the unix domain socket.
bind-socket = "/run/influxdb/influxdb.sock"
# The maximum size of a client request body, in bytes. Setting this value to
0 disables the limit.
# max-body-size = 25000000
# The maximum number of writes processed concurrently.
# Setting this to 0 disables the limit.
# max-concurrent-write-limit = 0
# The maximum number of writes queued for processing.
# Setting this to 0 disables the limit.
# max-enqueued-write-limit = 0
# The maximum duration for a write to wait in the queue to be processed.
# Setting this to 0 or setting max-concurrent-write-limit to 0 disables the
limit.
# enqueued-write-timeout = 0
[ifql]
# Determines whether the RPC service is enabled.
enabled = false
# Determines whether additional logging is enabled.
# log-enabled = true
# The bind address used by the ifql RPC service.
# bind-address = ":8082"
[logging]
# Determines which log encoder to use for logs. Available options
# are auto, logfmt, and json. auto will use a more a more user-friendly
# output format if the output terminal is a TTY, but the format is not as
# easily machine-readable. When the output is a non-TTY, auto will use
# logfmt.
format = "auto"
# Determines which level of logs will be emitted. The available levels
# are error, warn, info, and debug. Logs that are equal to or above the
# specified level will be emitted.
level = "info"
# Suppresses the logo output that is printed when the program is started.
# The logo is always suppressed if STDOUT is not a TTY.
suppress-logo = false
[subscriber]
# Determines whether the subscriber service is enabled.
enabled = false
# The default timeout for HTTP writes to subscribers.
# http-timeout = "30s"
# Allows insecure HTTPS connections to subscribers. This is useful when
testing with self-
# signed certificates.
# insecure-skip-verify = false
# The path to the PEM encoded CA certs file. If the empty string, the default
system certs will be used
# ca-certs = ""
# The number of writer goroutines processing the write channel.
# write-concurrency = 40
# The number of in-flight writes buffered in the write channel.
# write-buffer-size = 1000
[[graphite]]
# Determines whether the graphite endpoint is enabled.
enabled = false
# database = "graphite"
# retention-policy = ""
# bind-address = ":2003"
# protocol = "tcp"
# consistency-level = "one"
# These next lines control how batching works. You should have this enabled
# otherwise you could get dropped metrics or poor performance. Batching
# will buffer points in memory if you have many coming in.
# Flush if this many points get buffered
# batch-size = 5000
# number of batches that may be pending in memory
# batch-pending = 10
# Flush at least this often even if we haven't hit buffer limit
# batch-timeout = "1s"
# UDP Read buffer size, 0 means OS default. UDP listener will fail if set
above OS max.
# udp-read-buffer = 0
### This string joins multiple matching 'measurement' values providing more
control over the final measurement name.
# separator = "."
### Default tags that will be added to all metrics. These can be overridden
at the template level
### or by tags extracted from metric
# tags = ["region=us-east", "zone=1c"]
### Each template line requires a template pattern. It can have an optional
### filter before the template and separated by spaces. It can also have
optional extra
### tags following the template. Multiple tags should be separated by commas
and no spaces
### similar to the line protocol format. There can be only one default
template.
# templates = [
# "*.app env.service.resource.measurement",
# # Default template
# "server.*",
# ]
[[collectd]]
enabled = false
# bind-address = ":25826"
# database = "collectd"
# retention-policy = ""
#
# The collectd service supports either scanning a directory for multiple types
# db files, or specifying a single db file.
# typesdb = "/usr/local/share/collectd"
#
# security-level = "none"
# auth-file = "/etc/collectd/auth_file"
# These next lines control how batching works. You should have this enabled
# otherwise you could get dropped metrics or poor performance. Batching
# will buffer points in memory if you have many coming in.
# Flush if this many points get buffered
# batch-size = 5000
# Number of batches that may be pending in memory
# batch-pending = 10
# Flush at least this often even if we haven't hit buffer limit
# batch-timeout = "10s"
# UDP Read buffer size, 0 means OS default. UDP listener will fail if set
above OS max.
# read-buffer = 0
# Multi-value plugins can be handled two ways.
# "split" will parse and store the multi-value plugin data into separate
measurements
# "join" will parse and store the multi-value plugin as a single multi-value
measurement.
# "split" is the default behavior for backward compatability with previous
versions of influxdb.
# parse-multivalue-plugin = "split"
[[opentsdb]]
enabled = false
# bind-address = ":4242"
# database = "opentsdb"
# retention-policy = ""
# consistency-level = "one"
# tls-enabled = false
# certificate= "/etc/ssl/influxdb.pem"
# Log an error for every malformed point.
# log-point-errors = true
# These next lines control how batching works. You should have this enabled
# otherwise you could get dropped metrics or poor performance. Only points
# metrics received over the telnet protocol undergo batching.
# Flush if this many points get buffered
# batch-size = 1000
# Number of batches that may be pending in memory
# batch-pending = 5
# Flush at least this often even if we haven't hit buffer limit
# batch-timeout = "1s"
[[udp]]
enabled = false
# bind-address = ":8089"
# database = "udp"
# retention-policy = ""
# InfluxDB precision for timestamps on received points ("" or "n", "u", "ms",
"s", "m", "h")
# precision = ""
# These next lines control how batching works. You should have this enabled
# otherwise you could get dropped metrics or poor performance. Batching
# will buffer points in memory if you have many coming in.
# Flush if this many points get buffered
# batch-size = 5000
# Number of batches that may be pending in memory
# batch-pending = 10
# Will flush at least this often even if we haven't hit buffer limit
# batch-timeout = "1s"
# UDP Read buffer size, 0 means OS default. UDP listener will fail if set
above OS max.
# read-buffer = 0
[continuous_queries]
# Determines whether the continuous query service is enabled.
enabled = true
# Controls whether queries are logged when executed by the CQ service.
log-enabled = true
# Controls whether queries are logged to the self-monitoring data store.
query-stats-enabled = false
# interval for how often continuous queries will be checked if they need to
run
run-interval = "60s"
[tls]
# Determines the available set of cipher suites. See
https://golang.org/pkg/crypto/tls/#pkg-constants
# for a list of available ciphers, which depends on the version of Go (use
the query
# SHOW DIAGNOSTICS to see the version of Go used to build InfluxDB). If not
specified, uses
# the default settings from Go's crypto/tls package.
# ciphers = [
# "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
# "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
# ]
# Minimum version of the tls protocol that will be negotiated. If not
specified, uses the
# default settings from Go's crypto/tls package.
# min-version = "tls1.2"
# Maximum version of the tls protocol that will be negotiated. If not
specified, uses the
# default settings from Go's crypto/tls package.
# max-version = "tls1.2"
/etc/logrotate.d/influxdb changed:
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: influxdb
Source-Version: 1.6.4-2
Done: Shengjing Zhu <z...@debian.org>
We believe that the bug you reported is fixed in the latest version of
influxdb, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 954...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Shengjing Zhu <z...@debian.org> (supplier of updated influxdb package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 22 Apr 2020 02:59:01 +0800
Source: influxdb
Architecture: source
Version: 1.6.4-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg...@tracker.debian.org>
Changed-By: Shengjing Zhu <z...@debian.org>
Closes: 922691 954240
Changes:
influxdb (1.6.4-2) unstable; urgency=medium
.
* Team upload.
.
[ Shengjing Zhu ]
* Remove dgrijalva/jwt-go v3 patch.
Replace golang-github-dgrijalva-jwt-go-v3-dev with
golang-github-dgrijalva-jwt-go-dev
* Update maintainer address to team+pkg...@tracker.debian.org
* Use getent to parse entries (Closes: #954240)
Thanks Andreas Maus
.
[ Guillem Jover ]
* debian: Fix init script return code on restart action. (Closes: #922691)
The errcode is only assigned conditionally when there's an error return
code from the status action. But log_end_msg will default to an error
code of 1 if it gets no argument passed. So in this case the restart
will always return an error code.
Checksums-Sha1:
395b37943f9b4e56c93f09552852e82017b1413c 2986 influxdb_1.6.4-2.dsc
8d998e71dc3f0084fa357a26fb51077e39b97bf4 16700 influxdb_1.6.4-2.debian.tar.xz
697ab92fea75212e4ff9b5c3f096bf6273eb6624 11398 influxdb_1.6.4-2_amd64.buildinfo
Checksums-Sha256:
660cb988f856c29a5a58ffbb1a82ea3668827b26cc88c5ce471399d2f07e736a 2986
influxdb_1.6.4-2.dsc
6df79ca0eec7baa86b41408757ab0428ff228f210bcf4cd9697a56cff14e8c7b 16700
influxdb_1.6.4-2.debian.tar.xz
32bf5c5940202a9126f299e488baa8ab1d196b677a35dee82b7572dc30fb2c66 11398
influxdb_1.6.4-2_amd64.buildinfo
Files:
9be43169c48fc1e78d8de4774688d050 2986 database optional influxdb_1.6.4-2.dsc
c6804884daf4a431331d445634b526e3 16700 database optional
influxdb_1.6.4-2.debian.tar.xz
4c61e66e3cc5e398924f231eacb8118f 11398 database optional
influxdb_1.6.4-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iIYEARYIAC4WIQTiXc95jUQrjt9HgU3EhUo4GOCwFgUCXp9DARAcemhzakBkZWJp
YW4ub3JnAAoJEMSFSjgY4LAWRm0A/Rd3fV0uJcp9NPGRQkbqi0sKymbENSu38eJB
A5iWlCMfAQDgPCz/kvq7WFxKShIwCiq5HM5IVqy7BEe36GuNDXk4Cg==
=dRjq
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-go-maintainers mailing list
Pkg-go-maintainers@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-go-maintainers
