Package: waagent
Version: 2.2.47-2
Severity: important
X-Debbugs-Cc: cjp...@gmail.com

Using a cloud-init configuration with "packages" (for installation during 
cloud-final.service) causes waagent to contend for the apt lock, causing 
failures to properly provision with cloud-init.  Details from a user report can 
be found at [1].

The apt-get update performed by waagent-apt.service [2] may contend with apt 
operations being performed by cloud-init (during cloud-final.service).

Cloud-init takes care to prevent contention by having the cloud-final service 
configured to run Before=apt-daily.service [3].  There is no similar logic to 
order waagent-apt (before or after) cloud-final/apt-daily.

This Debian-specific service could probably be removed going forward in favor 
of setting the correct default archive for Azure images, rather than relying on 
a custom service to configure it at boot.  I opened a merge-request [4] to 
possibly accomplish this.

For existing releases, this could be mitigated by ordering the waagent service 
as Before=cloud-final.service.  I'm happy to propose patches for Debian 
10/11/sid if this seems like a reasonable course of action.

[1] https://github.com/MicrosoftDocs/azure-docs/issues/82500
[2] 
https://salsa.debian.org/waldi/waagent/-/commit/ffa9f9a0699209fcd461701b32270024e3d13624
[3] 
https://salsa.debian.org/cloud-team/cloud-init/-/blob/master/systemd/cloud-final.service.tmpl#L7
[4] azure config: update apt cdn to debian-archive.trafficmanager.net (!274) · 
Merge requests · Cloud Team / Debian Cloud images · GitLab

Reply via email to