From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id kPFfDzijwV92AQAA0tVLHw (envelope-from ) for ; Sat, 28 Nov 2020 01:09:12 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id CM87CzijwV8XQgAAbx9fmQ (envelope-from ) for ; Sat, 28 Nov 2020 01:09:12 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 78424940503 for ; Sat, 28 Nov 2020 01:09:11 +0000 (UTC) Received: from localhost ([::1]:34852 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kiojd-0002Ym-De for larch@yhetil.org; Fri, 27 Nov 2020 20:09:09 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:44812) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kiojW-0002Yc-QB for bug-guix@gnu.org; Fri, 27 Nov 2020 20:09:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:35122) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1kiojW-0000rr-IX for bug-guix@gnu.org; Fri, 27 Nov 2020 20:09:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1kiojW-0001h5-Bo for bug-guix@gnu.org; Fri, 27 Nov 2020 20:09:02 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#37309: =?UTF-8?Q?=E2=80=98ssh-daemon=E2=80=99?= service fails to start at boot Resent-From: Marius Bakke Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 28 Nov 2020 01:09:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 37309 X-GNU-PR-Package: guix X-GNU-PR-Keywords: fixed unreproducible To: Christopher Lemmer Webber , Giovanni Biscuolo Received: via spool by 37309-submit@debbugs.gnu.org id=B37309.16065257276491 (code B ref 37309); Sat, 28 Nov 2020 01:09:02 +0000 Received: (at 37309) by debbugs.gnu.org; 28 Nov 2020 01:08:47 +0000 Received: from localhost ([127.0.0.1]:46668 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kiojH-0001gd-Ek for submit@debbugs.gnu.org; Fri, 27 Nov 2020 20:08:47 -0500 Received: from eggs.gnu.org ([209.51.188.92]:54812) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kiojD-0001gN-5n for 37309@debbugs.gnu.org; Fri, 27 Nov 2020 20:08:46 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]:35953) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kioj7-0000pX-I8; Fri, 27 Nov 2020 20:08:37 -0500 Received: from host-37-191-224-14.lynet.no ([37.191.224.14]:43938 helo=localhost) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1kioj7-0003Py-4r; Fri, 27 Nov 2020 20:08:37 -0500 From: Marius Bakke In-Reply-To: <87tutajtgf.fsf@dustycloud.org> References: <87k1da6fdb.fsf@roquette.mug.biscuolo.net> <87y315t3hw.fsf@roquette.mug.biscuolo.net> <87tvbhra2v.fsf@roquette.mug.biscuolo.net> <87imrvhhpy.fsf@cbaines.net> <874l3crjqr.fsf@roquette.mug.biscuolo.net> <87k1c6p914.fsf@roquette.mug.biscuolo.net> <20190817152031.GA3191@jurong> <87pnkuyac0.fsf_-_@gnu.org> <20190828181141.GA27765@jurong> <87ef0u2867.fsf@roquette.mug.biscuolo.net> <87tutajtgf.fsf@dustycloud.org> Date: Sat, 28 Nov 2020 02:08:34 +0100 Message-ID: <87k0u6xp7x.fsf@gnu.org> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Spam-Score: -3.3 (---) X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: 37309@debbugs.gnu.org Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -3.37 X-Scanner: ns3122888.ip-94-23-21.eu Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-TUID: dRFlVIC8dDEP --=-=-= Content-Type: text/plain Christopher Lemmer Webber skriver: > Giovanni Biscuolo writes: > >> Hi, >> >> following a recent discussion on guix-sysadmin I have to confirm the >> ssh-daemon issue since it is still happening on some of the machines I >> administer >> >> Previous possibly related bug reports are >> https://issues.guix.gnu.org/issue/30993 and >> https://issues.guix.gnu.org/issue/32197 >> >> Unfortunately this issue is *not* well reproducible, it depends on some >> mysterious (to me) timing factor; AFAIU it does *not* depend on the >> shepherd version, probably it depends on "something" related to IPv6 >> (read below the details) > > This issue continues to plauge me, and has ever since I started to use > GuixSD. However it is much worse now that I am running Guix on > servers... I frequently have to log in via Linode's (nonfree!) web > console on every server that is rebooted and kick herd to restart > openssh. Once I do that it's fine. Can you share an excerpt of /var/log/messages (ideally the whole boot sequence) from when SSH failed to start? > I don't think my linode machine is on "spinning rust" so I don't think > this is the cause. IPv6, maybe? Dunno what. > > However I think that it's probably really a dependency issue somewhere; > herd is starting opensshd before some other dependent service is > spawned. But what? Maybe something authentication related like > networking, or something. But hm, networking is required... > > I'm assuming others must be experiencing this still too... right? FWIW I have never encountered this. :-/ > Would really like to see it fixed. It's one of the few things holding > me back from recommending Guix on servers to others. > > Do others have any idea? > > I noticed the lsh daemon requires networking. Why doesn't openssh? It's really for legacy reasons, from before we had the Guix System installer. Then a common way to install was to run dhclient and "herd start ssh-daemon" manually on the live image, so people could do the installation over SSH: https://issues.guix.gnu.org/26548#5 Nowadays, the installer gives a nice and quick way to deploy a minimal system, and I suspect the SSH method has fallen out of favor. > What about the following "fix"? [...] > (list (shepherd-service > (documentation "OpenSSH server.") > - (requirement '(syslogd loopback)) > + (requirement '(syslogd networking loopback)) If it works for you, let's do this. It would be good to find the underlying cause though... Not sure what to do about the installer however: perhaps create yet-another undocumented field of openssh-service-type that makes the networking requirement optional? --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFDBAEBCgAtFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAl/BoxIPHG1hcml1c0Bn bnUub3JnAAoJEKKgbfKjOlT6IkcIALXF4JaUnoObn2DOBkcTf83l7xOGTVP8CHMJ IBtQNc5hwpMKj39uzSM2CJPRmNxIqpcFbFYqUDATz9S6UET+mTHuQ9mCL2XsF5tF wRjneR/vUaCC0uSKOK01hdUon1dNzTY3lAfwEu41b/zLLXwjMZcnIlA4roIlcYhN VhM9oVpoGPZCoB9FpcnO7ab7pmvecsjajDYSqTrYgrwFrKZEulOm4lYPIDun7jHp JAzepeEfApYd7jPI346I0x+/xdGzXtcw5xprhfV6QkVqzeNZaLhZTMyn+iJjGl3H sYiw1DmSRn8zNz1YO7zt3Bk0mq5BLNiONXxdm6Z0Hcbq+Eh6k6A= =6Eah -----END PGP SIGNATURE----- --=-=-=--