[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

AppArmor has difficulties mediating filesystem access when overlayfs is involved. That's a known issue but isn't one that is easily solved due to the internal design of overlayfs and its use of private vfsmounts. It also isn't something that we're planning to fix for the 17.10 cycle. I thought

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

It seems that this only happens when using ga-16.04 and doesn't when using hwe-16.04 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1701297 Title: NTP reload failure (causing deployment failures

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: linux (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1701297 Title: NTP

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: apparmor (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1701297 Title:

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

** Also affects: linux (Ubuntu) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Importance: Undecided => Critical ** Also affects: apparmor (Ubuntu) Importance: Undecided Status: New ** Changed in: apparmor (Ubuntu) Importance: Undecided => Critical --

Re: [Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

that looks related to overlayfs use in ephemeral environment. On Thu, Jun 29, 2017 at 3:24 PM, Ryan Harper wrote: > [ 46.973551] audit: type=1400 audit(1498766510.281:15): > apparmor="STATUS" operation="profile_load" profile="unconfined" > name="/usr/sbin/ntpd"

Re: [Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

[ 46.973551] audit: type=1400 audit(1498766510.281:15): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/ntpd" pid=2936 comm="apparmor_parser" [ 48.051990] audit: type=1400 audit(1498766472.362:16): apparmor="DENIED" operation="getattr" info="Failed name lookup -

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

syslog http://paste.ubuntu.com/24983800/ dmesg http://paste.ubuntu.com/24983801/ journal http://pastebin.ubuntu.com/24983806/ -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1701297 Title: NTP reload

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

Ok, so I have been able to consistently reproduce this issue: 1. Using MAAS 2.1.5 2. Deployed a machine, it failed with NTP failing to configure. 3. Added a global kernel param with apparmor=0. Deployed successfully. -- You received this bug notification because you are a member of Ubuntu Bugs,

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

Ashley, Can we get 'dmesg' output and syslog also? Thanks, -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1701297 Title: NTP reload failure (causing deployment failures with MAAS) To manage

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

Hi Ashley -- I've tried to repro on the latest xenial images, and I don't see this happening (with NTP setup in my MAAS). Given the odd shared object permission denied message, I wonder if there is some corruption going on on the system? Until we get a clear list of reproduction steps, or

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

ubuntu@donphan:~$ sudo journalctl -u ntp --no-pager --since today sudo: unable to resolve host donphan -- Logs begin at Thu 2017-06-29 16:36:06 UTC, end at Thu 2017-06-29 16:44:47 UTC. -- Jun 29 16:36:36 donphan systemd[1]: Starting LSB: Start NTP daemon... Jun 29 16:36:36 donphan ntp[2441]: *

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

Note that this bug was reported by Ashley, you I filed it. That said, I've attempted to reproduce this with latest maas images containing cloud-init 0.7.9-153-g16a7302f-0ubuntu1~16.04.1 in MAAS 2.3 and have not come across such issue -- You received this bug notification because you are a

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

https://pastebin.canonical.com/192261/ -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1701297 Title: NTP reload failure (causing deployment failures with MAAS) To manage notifications about this

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

Please attach the journalctl -xe failure output ** Changed in: cloud-init Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1701297 Title: NTP reload failure (causing

[Bug 1701297] Re: NTP reload failure (causing deployment failures with MAAS)

Seems this is related to: - cc_ntp: write template before installing and add service restart [Ryan Harper] (LP: #1645644) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1701297 Title: NTP