Package: postfix Version: 3.5.6-1+b1 Severity: normal This server is following testing, and has automatic upgrades enabled. On Sep 22, all outgoing mail ceased flowing.
I have been able to work around the problem by disabling chrooting for smtp in master.cf. /var/spool/postfix/etc/services seems ok, it was last modified in 2020 and has: smtp 25/tcp mail It does seem like it's out of date compared to /etc/services. Looking at the logs, the error first occurred at 6:32. At very close to the same time, there was this automatic upgrade: 2021-09-22 06:30:46 upgrade libc6:amd64 2.31-17 2.32-4 Other packages were upgraded too, but a libc upgrade folowed by a nsswitch problem 2 minutes later seems probably related. Looking at /var/spool/postfix/lib/x86_64-linux-gnu/ I notice it's kind of a mess: -rw-r--r-- 1 root root 99K May 7 2020 libgcc_s.so.1 -rw-r--r-- 1 root root 31K Sep 21 2015 libnss_compat-2.19.so -rw-r--r-- 1 root root 31K Feb 17 2016 libnss_compat-2.21.so -rw-r--r-- 1 root root 31K Jun 26 2016 libnss_compat-2.22.so -rw-r--r-- 1 root root 31K Aug 23 2016 libnss_compat-2.23.so -rw-r--r-- 1 root root 31K Aug 26 2017 libnss_compat-2.24.so -rw-r--r-- 1 root root 31K Dec 16 2017 libnss_compat-2.25.so -rw-r--r-- 1 root root 31K Jan 26 2018 libnss_compat-2.26.so -rw-r--r-- 1 root root 39K Oct 29 2018 libnss_compat-2.27.so -rw-r--r-- 1 root root 39K May 1 2019 libnss_compat-2.28.so -rw-r--r-- 1 root root 39K Feb 4 2020 libnss_compat-2.29.so -rw-r--r-- 1 root root 39K Mar 25 2020 libnss_compat-2.30.so lrwxrwxrwx 1 root root 21 Mar 25 2020 libnss_compat.so.2 -> libnss_compat-2.30.so -rw-r--r-- 1 root root 23K Sep 21 2015 libnss_dns-2.19.so -rw-r--r-- 1 root root 23K Feb 17 2016 libnss_dns-2.21.so -rw-r--r-- 1 root root 23K Jun 26 2016 libnss_dns-2.22.so -rw-r--r-- 1 root root 23K Aug 23 2016 libnss_dns-2.23.so -rw-r--r-- 1 root root 23K Aug 26 2017 libnss_dns-2.24.so -rw-r--r-- 1 root root 23K Dec 16 2017 libnss_dns-2.25.so -rw-r--r-- 1 root root 23K Jan 26 2018 libnss_dns-2.26.so -rw-r--r-- 1 root root 27K Oct 29 2018 libnss_dns-2.27.so -rw-r--r-- 1 root root 27K May 1 2019 libnss_dns-2.28.so -rw-r--r-- 1 root root 27K Feb 4 2020 libnss_dns-2.29.so -rw-r--r-- 1 root root 27K Mar 25 2020 libnss_dns-2.30.so lrwxrwxrwx 1 root root 18 Mar 25 2020 libnss_dns.so.2 -> libnss_dns-2.30.so -rw-r--r-- 1 root root 47K Sep 21 2015 libnss_files-2.19.so -rw-r--r-- 1 root root 47K Feb 17 2016 libnss_files-2.21.so -rw-r--r-- 1 root root 47K Jun 26 2016 libnss_files-2.22.so -rw-r--r-- 1 root root 47K Aug 23 2016 libnss_files-2.23.so -rw-r--r-- 1 root root 47K Aug 26 2017 libnss_files-2.24.so -rw-r--r-- 1 root root 47K Dec 16 2017 libnss_files-2.25.so -rw-r--r-- 1 root root 47K Jan 26 2018 libnss_files-2.26.so -rw-r--r-- 1 root root 55K Oct 29 2018 libnss_files-2.27.so -rw-r--r-- 1 root root 55K May 1 2019 libnss_files-2.28.so -rw-r--r-- 1 root root 51K Feb 4 2020 libnss_files-2.29.so -rw-r--r-- 1 root root 51K Mar 25 2020 libnss_files-2.30.so lrwxrwxrwx 1 root root 18 Mar 25 2020 libnss_files.so.2 -> libnss_files-2.30.so Same for the ooutside the chroot. of these libs in /lib/x86_64-linux-gnu/ lrwxrwxrwx 1 root root 20 Sep 19 14:46 /lib/x86_64-linux-gnu/libnss_files.so.2 -> libnss_files-2.32.so This makes me wonder a) why are the old ones not getting cleaned out b) why are the new ones not copied in yet, and c) might there be libnss version skew with libc? -- System Information: Debian Release: bookworm/sid APT prefers testing APT policy: (500, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-8-amd64 (SMP w/2 CPU threads) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages postfix depends on: ii adduser 3.118 ii cpio 2.13+dfsg-7 ii debconf [debconf-2.0] 1.5.77 ii dpkg 1.20.9 ii e2fsprogs 1.46.4-1 ii libc6 2.32-4 ii libdb5.3 5.3.28+dfsg1-0.8 ii libicu67 67.1-7 ii libnsl2 1.3.0-2 ii libsasl2-2 2.1.27+dfsg-2.1 ii libssl1.1 1.1.1l-1 ii lsb-base 11.1.0 ii netbase 6.3 ii ssl-cert 1.1.0+nmu1 Versions of packages postfix recommends: ii ca-certificates 20210119 ii python3 3.9.2-3 Versions of packages postfix suggests: ii bsd-mailx [mail-reader] 8.1.2-0.20180807cvs-2 ii dovecot-core [dovecot-common] 1:2.3.16+dfsg1-3 ii libsasl2-modules 2.1.27+dfsg-2.1 ii mutt [mail-reader] 2.0.5-4.1 pn postfix-cdb <none> pn postfix-doc <none> pn postfix-ldap <none> pn postfix-lmdb <none> pn postfix-mysql <none> ii postfix-pcre 3.5.6-1+b1 pn postfix-pgsql <none> ii postfix-sqlite 3.5.6-1+b1 ii procmail 3.22-26 pn resolvconf <none> ii sasl2-bin 2.1.27+dfsg-2.1 pn ufw <none> -- debconf information excluded -- see shy jo
