[Pkg-ganeti-devel] Bug#871771: ganeti: socat support broken in Stretch

[Marek Salwerowicz]

Package: ganeti
Version: 2.15.2-7
Severity: normal

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
     gnt-backup import/export operations

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
     gnt-backup export -n mynode.mydomain   myvm.mydomain

   * What was the outcome of this action?

Fri Aug 11 12:08:36 2017  - WARNING: import 'import-disk0-2017-08-11_12_08_27-igVAWh' on mynode.mydomain failed: Exited with status 1
Fri Aug 11 12:08:36 2017 snapshot/0 failed to receive data: Exited with status 1 (recent output: socat: E openssl-method="TLSv1": method unknown or not provided by library)


     
   * What outcome did you expect instead?
     Proper backup export operation


The issue is related to file:
/etc/ganeti/share/ganeti/impexpd/__init__.py

lines:

SOCAT_OPENSSL_OPTS = ["verify=1", "method=TLSv1",
                      "cipher=%s" % constants.OPENSSL_CIPHERS]


should be:
SOCAT_OPENSSL_OPTS = ["verify=0", "method=TLS1",
                      "cipher=%s" % constants.OPENSSL_CIPHERS]



https://groups.google.com/forum/#!topic/ganeti/Mm8LrdXYsr8

https://github.com/ganeti/ganeti/issues/1232






-- Package-specific info:
Version symlinks:
  /etc/ganeti/share -> /usr/share/ganeti/2.15
  /etc/ganeti/lib -> /usr/lib/ganeti/2.15
Cluster config version: 2.15.2
Address family: IPv4
Enabled hypervisors: kvm
kvm hypervisor parameters:
  acpi=True
  boot_order=disk
  cpu_cores=0
  cpu_mask=all
  cpu_sockets=0
  cpu_threads=0
  disk_aio=threads
  disk_cache=default
  disk_type=paravirtual
  initrd_path=/initrd.img
  kernel_args=ro net.ifnames=0
  kernel_path=/vmlinuz
  kvm_path=/usr/bin/kvm
  migration_bandwidth=32
  migration_downtime=30
  migration_mode=live
  migration_port=8102
  nic_type=paravirtual
  reboot_behavior=reboot
  root_path=/dev/vda
  security_model=none
  serial_console=True
  serial_speed=38400
  spice_ip_version=0
  spice_playback_compression=True
  spice_tls_ciphers=HIGH:-DES:-3DES:-EXPORT:-DH
  spice_use_tls=False
  spice_use_vdagent=True
  use_chroot=False
  use_localtime=False
  user_shutdown=False
  vhost_net=False
  virtio_net_queues=1
  vnc_tls=False
  vnc_x509_verify=False
  vnet_hdr=True

-- System Information:
Debian Release: 9.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/16 CPU cores)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8), LANGUAGE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages ganeti depends on:
ii  adduser              3.115
ii  ganeti-2.15          2.15.2-7
ii  ganeti-haskell-2.15  2.15.2-7
ii  ganeti-htools-2.15   2.15.2-7
ii  python               2.7.13-2

Versions of packages ganeti recommends:
ii  drbd-utils                   8.9.10-2
ii  drbd8-utils                  2:8.9.10-2
ii  ganeti-instance-debootstrap  0.16-2.1
ii  ndisc6                       1.0.3-3
ii  qemu-kvm                     1:2.8+dfsg-6+deb9u2

Versions of packages ganeti suggests:
pn  blktap-dkms  <none>
pn  ganeti-doc   <none>
ii  molly-guard  0.6.4

-- no debconf information