Bug 38496 - The EC2 appliance setup yields a broken system due to wrong hash sums on repository server
The EC2 appliance setup yields a broken system due to wrong hash sums on repo...
Status: RESOLVED WONTFIX
Product: UCS
Classification: Unclassified
Component: UMC - Setup wizard
UCS 4.0
Other Linux
: P5 normal (vote)
: UCS 4.0-x
Assigned To: UMC maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2015-05-08 10:53 CEST by Alexander Kläser
Modified: 2019-01-03 07:17 CET (History)
2 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Error handling, External feedback, Troubleshooting, Usability
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Kläser univentionstaff 2015-05-08 10:53:05 CEST
In the setup.log, the following error is shown during the execution of 05/10role:
-------------------- 8< --------------------
[...]
__ERR__:Fetch failed (W:Fehlschlag beim Holen von http://updates.software-univention.de/4.0/maintained/component/4.0-1-errata/all/Packages  Hash-Summe stimmt nicht überein
, W:Fehlschlag beim Holen von http://updates.software-univention.de/4.0/maintained/component/4.0-1-errata/amd64/Packages  Hash-Summe stimmt nicht überein
, E:Einige Indexdateien konnten nicht heruntergeladen werden. Sie wurden ignoriert oder alte an ihrer Stelle benutzt.)
[...]
-------------------- 8< --------------------

Accordingly, the system role could not be configured correctly. The final execution of 90_postjoin/20upgrade removes most packages that are important for a UCS system:
-------------------- 8< --------------------
[...]
Die folgenden Pakete werden ENTFERNT:
  apache2-mpm-prefork{u} apache2-utils{u} apache2.2-bin{u}
  apache2.2-common{u} apt-mirror{u} at{u} heimdal-clients{u}
  javascript-common{u} libapache2-mod-auth-pam{u} libapache2-mod-php5{u}
  libapr1{u} libaprutil1{u} libaprutil1-dbd-sqlite3{u} libaprutil1-ldap{u}
  libaudit0{u} libdb3{u} libdrm-intel1{u} libdrm-nouveau1a{u}
  libdrm-radeon1{u} libfontenc1{u} libgif4{u} libgl1-mesa-dri{u}
  libgl1-mesa-glx{u} libglade2-0{u} libglapi-mesa{u} libid3tag0{u}
  libimlib2{u} libjs-jquery{u} libkadm5srv8-heimdal{u} libkafs0-heimdal{u}
  libmtdev1{u} libobrender27{u} libobt0{u} libonig2{u} libotp0-heimdal{u}
  libpam-univentionmailcyrus{u} libpciaccess0{u} libqdbm14{u}
  libsl0-heimdal{u} libsmbclient{u} libstartup-notification0{u}
  libunivention-config0{u} libunivention-policy0{u} libx11-xcb1{u}
  libxaw7{u} libxcb-dri2-0{u} libxcb-glx0{u} libxcb-shape0{u}
  libxcb-util0{u} libxfont1{u} libxkbfile1{u} libxmu6{u} libxpm4{u}
  libxslt1.1{u} libxtst6{u} libxv1{u} libxvmc1{u} libxxf86dga1{u}
  libxxf86vm1{u} obconf{u} openbox{u} openbox-themes{u} php5{u} php5-cli{u}
  php5-common{u} python-cherrypy3{u} python-dnspython{u} python-lxml{u}
  python-psutil{u} python-simplejson{u} runit{u} samba-common{u}
  samba-common-bin{u} screen{u} smbclient{u} univention-apache{u}
  univention-directory-listener{u} univention-directory-policy{u}
  univention-errata-level{u} univention-heimdal-common{u}
  univention-ipcalc{u} univention-mail-postfix{u}
  univention-management-console-frontend{u}
  univention-management-console-frontend-theme{u}
  univention-management-console-module-appcenter{u}
  univention-management-console-module-lib{u}
  univention-management-console-module-setup{u}
  univention-management-console-web-server{u} univention-runit{u}
  univention-ssl{u} univention-system-setup{u} univention-system-setup-boot
  univention-updater{u} wwwconfig-common{u} x11-utils{u} x11-xkb-utils{u}
  xfonts-base{u} xfonts-encodings{u} xfonts-utils{u} xinit{u}
  xserver-common{u} xserver-xorg{u} xserver-xorg-core{u}
  xserver-xorg-input-all{u} xserver-xorg-input-evdev{u}
  xserver-xorg-input-mouse{u} xserver-xorg-input-synaptics{u}
  xserver-xorg-input-vmmouse{u} xserver-xorg-video-all{u}
  xserver-xorg-video-apm{u} xserver-xorg-video-ark{u}
  xserver-xorg-video-ati{u} xserver-xorg-video-chips{u}
  xserver-xorg-video-cirrus{u} xserver-xorg-video-fbdev{u}
  xserver-xorg-video-i128{u} xserver-xorg-video-intel{u}
  xserver-xorg-video-mach64{u} xserver-xorg-video-mga{u}
  xserver-xorg-video-neomagic{u} xserver-xorg-video-nouveau{u}
  xserver-xorg-video-openchrome{u} xserver-xorg-video-r128{u}
  xserver-xorg-video-radeon{u} xserver-xorg-video-rendition{u}
  xserver-xorg-video-s3{u} xserver-xorg-video-s3virge{u}
  xserver-xorg-video-savage{u} xserver-xorg-video-siliconmotion{u}
  xserver-xorg-video-sis{u} xserver-xorg-video-sisusb{u}
  xserver-xorg-video-tdfx{u} xserver-xorg-video-trident{u}
  xserver-xorg-video-tseng{u} xserver-xorg-video-vesa{u}
  xserver-xorg-video-vmware{u} xserver-xorg-video-voodoo{u}
0 Pakete aktualisiert, 0 zusätzlich installiert, 137 werden entfernt und 0 nicht aktualisiert.
0 B an Archiven müssen heruntergeladen werden. Nach dem Entpacken werden 278 MB frei werden.
Schreiben der erweiterten Statusinformationen...
(Lese Datenbank ... 64274 Dateien und Verzeichnisse sind derzeit installiert.)
Entfernen von univention-management-console-web-server ...
Stopping Univention Management Console Web Server.
done.
-------------------- 8< --------------------

Afterwards, the setup.log stops. The UMC module process has been stopped along with the removal of its package.
Comment 1 Alexander Kläser univentionstaff 2015-05-08 10:54:19 CEST
Ticket#2015050821000196.
Comment 2 Alexander Kläser univentionstaff 2015-05-08 11:07:07 CEST
Three possible consequences, that I see:

1) All necessary packages are cached on a appliance. In order to minimize possible error scenarios, the external repository could be disabled in the beginning and re-enabled at the end, e.g., during the upgrade process.

2) The error handling needs to detect such a scenario! In order to avoid the tester impression that UCS was setup and does not work, the join process should be cancelled and an error message should be shown to the user.

3) It might helpful as well, to implement regular (+ frequent) checks (e.g., via Nagios) whether our repository server + the appcenter are working as expected.

4) It might helpful as well, to (in whatever way) lock the repository server during a sync process.

3) + 4) do not lie in the scope if this bug, though.
Comment 3 Janek Walkenhorst univentionstaff 2015-05-08 12:57:44 CEST
(In reply to Alexander Kläser from comment #2)
> 4) It might helpful as well, to (in whatever way) lock the repository server
> during a sync process.
Implemented
Comment 4 Florian Best univentionstaff 2015-05-08 16:30:58 CEST
Error handling Bug #35463 /(bug37087)
Comment 5 Stefan Gohmann univentionstaff 2019-01-03 07:17:22 CET
This issue has been filled against UCS 4.0. The maintenance with bug and security fixes for UCS 4.0 has ended on 31st of May 2016.

Customers still on UCS 4.0 are encouraged to update to UCS 4.3. Please contact
your partner or Univention for any questions.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or simply reopen the issue. In this case please provide detailed information on how this issue is affecting you.