ok. The "bug" is reproducible. It has happened on every time i have
installed ubuntu 16.04 (all iterations). It is quirky because if you do
a reboot three times in a row, the error message goes away and apparmor
allows mysql to start without any errors. on the same machine with
exactly the same hardware and configurations, 16 fails, 15 fails, 14
fails half the time, and 12 runs. Every failure is a combination of
apparmor and mysql. My test system is to do 4 fresh installs and
configurations on each version of ubuntu.

If this is not a bug in the operating system, then I have been using the
wrong definition of what a bug in software is for the last 42 years.  It
is a bug if it happens at all whether you can repeat the case or not.
Unless I send you my machine, you cant reproduce it or we wouldnt be
exchanging messages.

Bottom line, I am having a problem with Ubuntu and the way apparmor
interacts with other parts of the operating system. Since Im not a linux
programmer, nor do i have the time to chase this rabbit down the hole, I
have two choices. One, get windows server, or two, get a new machine.

Thank you for your time you have graciously given me. I do appreciate
it. Im frustrated at the issue and not you. please forgive me for being
rude or offending you. It was not my intention.

Gary

Sent from my iPad

> On Mar 6, 2017, at 5:07 AM, Robie Basak <[email protected]> wrote:
> 
> @Gary
> 
> Look, I want to help. Please see "How to Report Bugs Effectively" at
> http://www.chiark.greenend.org.uk/~sgtatham/bugs.html for an excellent
> explanation as to why I cannot help right now.
> 
>> You can now consider the original post an official bug report.
> 
> Unfortunately the bug status will have to be marked Incomplete until we
> have steps to reproduce the problem. I want it to be clear that
> developers do not have enough information to help with this right now,
> as they don't know how to reproduce the problem and nobody has any hunch
> as to what is really happening. Thus we also don't know if it is a bug
> in Ubuntu's mysql-5.7 packaging (or in Ubuntu at all) or not, since we
> don't know if it is something about how you set up the system which
> results in this problem.
> 
> You mentioned webmin, which is not part of Ubuntu. Is it possible that
> you and Richard both have webmin in common, and that it is the use of
> webmin that results in the problem (perhaps a race?) rather than a bug
> in Ubuntu?
> 
> @Paul
> @haliphax
> 
> It seems that you both have a different error message. Though it is
> related to AppArmor, the root cause for your problem is likely to be
> different. It looks more likely to me that you are affected by bug
> 1658239 rather than this one.
> 
> ** Summary changed:
> 
> - mysql server fails to start due to faulty apparmor profile
> + Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to 
> fail to start
> 
> ** Description changed:
> 
> + [Triage Notes]
> + 
> + This bug tracks reports of the following AppArmor denial:
> + 
> + Aug  7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400
> + audit(1470619337.926:98): apparmor="DENIED" operation="open"
> + profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219
> + comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0
> + 
> + If you are seeing a denial of /etc/mysql/my.cnf.migrated in this manner,
> + then the underlying issue may affect you too.
> + 
> + If you are seeing a denial of some other file, then you have some other
> + AppArmor-related problem that is *not* the issue tracked in this bug. If
> + you believe that your failure is a bug in Ubuntu, please look for other
> + bugs and file a new bug if there isn't a matching one that tracks your
> + different issue.
> + 
> + [Original Desription]
> + 
>  SYMPTOM
>  mysql fails to start
> 
> - 
>  IMPACT
>  no sql for you
> - 
> 
>  DIAGNOSE:
>  service mysql start
>  Job for mysql.service failed because the control process exited with error 
> code. See "systemctl status mysql.service" and "journalctl -xe" for details.
> 
>  - systemd has all sort of craziness going on so stop that
>  service mysql stop
> 
>  - look at what apparmor is up to
>  tail -F /var/log/syslog | grep -i apparmor
> 
>  - then start again
>  service mysql start
> 
>  output is:
>  - mysql cannot read /etc/mysql
>  Aug  7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400 
> audit(1470619337.926:98): apparmor="DENIED" operation="open" 
> profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219 
> comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0
> 
> - 
>  GET_AROUND:
>  sudo nano /etc/apparmor.d/usr.sbin.mysqld
>  line 25 after:
>  # Allow config access
> -   /etc/mysql/** r,
> +   /etc/mysql/** r,
>  -add line:
> -   /etc/mysql/* r,
> +   /etc/mysql/* r,
> 
>  systemctl restart apparmor.service
> 
>  service mysql stop
>  service mysql start
> 
>  - problem is gone
> 
>  ProblemType: Bug
>  DistroRelease: Ubuntu 16.04
>  Package: mysql-server-5.7 5.7.13-0ubuntu0.16.04.2
>  ProcVersionSignature: Ubuntu 4.4.0-31.50-generic 4.4.13
>  Uname: Linux 4.4.0-31-generic x86_64
>  ApportVersion: 2.20.1-0ubuntu2.1
>  Architecture: amd64
>  Date: Sun Aug  7 18:31:32 2016
>  Logs.var.log.daemon.log:
> -  
> + 
>  MySQLConf.etc.mysql.conf.d.mysql.cnf: [mysql]
>  MySQLConf.etc.mysql.conf.d.mysqld_safe_syslog.cnf:
> -  [mysqld_safe]
> -  syslog
> +  [mysqld_safe]
> +  syslog
>  MySQLConf.etc.mysql.conf.d.mysqldump.cnf:
> -  [mysqldump]
> -  quick
> -  quote-names
> -  max_allowed_packet    = 16M
> +  [mysqldump]
> +  quick
> +  quote-names
> +  max_allowed_packet    = 16M
>  MySQLConf.etc.mysql.mysql.conf.d.mysqld_safe_syslog.cnf:
> -  [mysqld_safe]
> -  syslog
> +  [mysqld_safe]
> +  syslog
>  MySQLVarLibDirListing: ['debian-5.0.flag', 'ib_buffer_pool', 'test', 
> 'ib_logfile1', 'xpc21.err', 'auto.cnf', 'mysql_upgrade_info', 'bugzilla', 
> 'zabbix', 'debian-5.5.flag', 'debian-5.1.flag', 'redmine_default', 
> 'roundcube', 'ib_logfile0', 'ibtmp1', 'sys', 'mysql', 'ibdata1', 'bugs', 
> 'debian-5.7.flag', 'owncloud', 'performance_schema']
>  ProcEnviron:
> -  SHELL=/bin/bash
> -  TERM=xterm
> -  PATH=(custom, user)
> -  LANG=en_US.UTF-8
> -  LANGUAGE=en_US.UTF-8
> +  SHELL=/bin/bash
> +  TERM=xterm
> +  PATH=(custom, user)
> +  LANG=en_US.UTF-8
> +  LANGUAGE=en_US.UTF-8
>  SourcePackage: mysql-5.7
>  UpgradeStatus: Upgraded to xenial on 2016-06-13 (56 days ago)
>  modified.conffile..etc.apparmor.d.usr.sbin.mysqld: [modified]
>  mtime.conffile..etc.apparmor.d.usr.sbin.mysqld: 2016-08-07T18:24:24.264357
> 
> ** Changed in: mysql-5.7 (Ubuntu)
>       Status: Confirmed => Incomplete
> 
> -- 
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1610765
> 
> Title:
>  Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it
>  to fail to start
> 
> Status in mysql-5.7 package in Ubuntu:
>  Incomplete
> 
> Bug description:
>  [Triage Notes]
> 
>  This bug tracks reports of the following AppArmor denial:
> 
>  Aug  7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400
>  audit(1470619337.926:98): apparmor="DENIED" operation="open"
>  profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219
>  comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0
> 
>  If you are seeing a denial of /etc/mysql/my.cnf.migrated in this
>  manner, then the underlying issue may affect you too.
> 
>  If you are seeing a denial of some other file, then you have some
>  other AppArmor-related problem that is *not* the issue tracked in this
>  bug. If you believe that your failure is a bug in Ubuntu, please look
>  for other bugs and file a new bug if there isn't a matching one that
>  tracks your different issue.
> 
>  [Original Desription]
> 
>  SYMPTOM
>  mysql fails to start
> 
>  IMPACT
>  no sql for you
> 
>  DIAGNOSE:
>  service mysql start
>  Job for mysql.service failed because the control process exited with error 
> code. See "systemctl status mysql.service" and "journalctl -xe" for details.
> 
>  - systemd has all sort of craziness going on so stop that
>  service mysql stop
> 
>  - look at what apparmor is up to
>  tail -F /var/log/syslog | grep -i apparmor
> 
>  - then start again
>  service mysql start
> 
>  output is:
>  - mysql cannot read /etc/mysql
>  Aug  7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400 
> audit(1470619337.926:98): apparmor="DENIED" operation="open" 
> profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219 
> comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0
> 
>  GET_AROUND:
>  sudo nano /etc/apparmor.d/usr.sbin.mysqld
>  line 25 after:
>  # Allow config access
>    /etc/mysql/** r,
>  -add line:
>    /etc/mysql/* r,
> 
>  systemctl restart apparmor.service
> 
>  service mysql stop
>  service mysql start
> 
>  - problem is gone
> 
>  ProblemType: Bug
>  DistroRelease: Ubuntu 16.04
>  Package: mysql-server-5.7 5.7.13-0ubuntu0.16.04.2
>  ProcVersionSignature: Ubuntu 4.4.0-31.50-generic 4.4.13
>  Uname: Linux 4.4.0-31-generic x86_64
>  ApportVersion: 2.20.1-0ubuntu2.1
>  Architecture: amd64
>  Date: Sun Aug  7 18:31:32 2016
>  Logs.var.log.daemon.log:
> 
>  MySQLConf.etc.mysql.conf.d.mysql.cnf: [mysql]
>  MySQLConf.etc.mysql.conf.d.mysqld_safe_syslog.cnf:
>   [mysqld_safe]
>   syslog
>  MySQLConf.etc.mysql.conf.d.mysqldump.cnf:
>   [mysqldump]
>   quick
>   quote-names
>   max_allowed_packet    = 16M
>  MySQLConf.etc.mysql.mysql.conf.d.mysqld_safe_syslog.cnf:
>   [mysqld_safe]
>   syslog
>  MySQLVarLibDirListing: ['debian-5.0.flag', 'ib_buffer_pool', 'test', 
> 'ib_logfile1', 'xpc21.err', 'auto.cnf', 'mysql_upgrade_info', 'bugzilla', 
> 'zabbix', 'debian-5.5.flag', 'debian-5.1.flag', 'redmine_default', 
> 'roundcube', 'ib_logfile0', 'ibtmp1', 'sys', 'mysql', 'ibdata1', 'bugs', 
> 'debian-5.7.flag', 'owncloud', 'performance_schema']
>  ProcEnviron:
>   SHELL=/bin/bash
>   TERM=xterm
>   PATH=(custom, user)
>   LANG=en_US.UTF-8
>   LANGUAGE=en_US.UTF-8
>  SourcePackage: mysql-5.7
>  UpgradeStatus: Upgraded to xenial on 2016-06-13 (56 days ago)
>  modified.conffile..etc.apparmor.d.usr.sbin.mysqld: [modified]
>  mtime.conffile..etc.apparmor.d.usr.sbin.mysqld: 2016-08-07T18:24:24.264357
> 
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1610765

Title:
  Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it
  to fail to start

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to