[Pkg-dns-devel] Bug#852059: Bug#852059: opendnssec-signer: installation hangs on invoke-rc.d due to script name being to long

[Michael Biebl]

On Mon, 3 Apr 2017 14:37:27 +0200 Michael Biebl <biebl at debian.org> wrote:
> Am 03.04.2017 um 13:32 schrieb Michael Biebl:

> > In jessie, your opendnssec-signer SysV init script didn't use
> > init-d-script, which would explain the regression in stretch.
> 
> After rebooting the test VM using sysvinit, the system get's stuck
> during boot. This confirms that it's not an issue in invoke-rc.d (as
> /etc/init.d/rc start the init scripts directly without using
> invoke-rc.d) but makes this issue even more severe, as it renders the
> system unbootable.

Hm, wait a second. After looking at the SysV init script, it's rather
obvious what's broken:

https://anonscm.debian.org/git/pkg-dns/opendnssec.git/tree/debian/opendnssec-signer.init#n27

This while loop never finishes as you don't actually read from the file.
There's a missing
done < "$TMPFILES"

After you fix that, the service will no longer hang but you'll get those
error messages:

chown: invalid group: 'opendnssec:opendnssec - -'

Starting OpenDNSSEC Signer: opendnsec-signerstart-stop-daemon: warning:
this system is not able to track process names
longer than 15 characters, please use --exec instead of --name.
start-stop-daemon: warning: this system is not able to track process names
longer than 15 characters, please use --exec instead of --name.
OpenDNSSEC signer engine version 2.0.4
 failed!


I fear the SysV init scripts for opendnssec-{signer,enforcer} are in a
pretty much borked state atm.
The do_tmpfiles() routine is broken in several ways.

The start/stop routine using --name is broken as well, as you use
NAME=opendnssec-signer
but that isn't the actual name of the binary that is spawned.


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-dns-devel/attachments/20170404/f33445a4/attachment.sig>