[debian-mysql] Bug#867137: mariadb-server-10.1: mariadb install fails with NO_NEW_PRIVILEGES

Thu Jul 6 00:28:45 UTC 2017

steps that allowed me to successfully install mariadb-server
- put the following contents into the mariadb service unit file
#+BEGIN_SRC
[Service]
PrivateDevices=false
NoNewPrivileges=false

#+END_SRC
- install mariadb-server

example:
ozzloy:~/ $ sudo systemctl edit mariadb.service
ozzloy:~/ $ cat /etc/systemd/system/mariadb.service.d/override.conf
[Service]
PrivateDevices=false
NoNewPrivileges=false

ozzloy:~/ $ sudo apt-get install -y mariadb-server

* summary of actions
- attempted mariadb-server install fails without override.conf
- uninstall mariadb-server-10.1
- add mariadb systemd configuration
- clean install mariadb-server with override.conf in place ahead of time

* full output of terminal, broken into sections
##################################################
##################################################
** attempted mariadb-server install fails without override.conf
ozzloy:~/ $ sudo rm /etc/systemd/system/mariadb.service.d/override.conf
ozzloy:~/ $ sudo apt-get install -y mariadb-server
[16:11:46]
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  galera-3 mariadb-server-10.1 mariadb-server-core-10.1 socat
Suggested packages:
  mariadb-test netcat-openbsd tinyca
The following NEW packages will be installed:
  galera-3 mariadb-server mariadb-server-10.1 mariadb-server-core-10.1 socat
0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/11.8 MB of archives.
After this operation, 109 MB of additional disk space will be used.
Preconfiguring packages ...
Selecting previously unselected package galera-3.
(Reading database ... 228172 files and directories currently installed.)
Preparing to unpack .../galera-3_25.3.19-2_amd64.deb ...
Unpacking galera-3 (25.3.19-2) ...
Selecting previously unselected package mariadb-server-core-10.1.
Preparing to unpack .../mariadb-server-core-10.1_10.1.23-9+deb9u1_amd64.deb
...
Unpacking mariadb-server-core-10.1 (10.1.23-9+deb9u1) ...
Selecting previously unselected package socat.
Preparing to unpack .../socat_1.7.3.1-2+b1_amd64.deb ...
Unpacking socat (1.7.3.1-2+b1) ...
Selecting previously unselected package mariadb-server-10.1.
Preparing to unpack .../mariadb-server-10.1_10.1.23-9+deb9u1_amd64.deb ...
/var/lib/mysql: found previous version 10.1
Unpacking mariadb-server-10.1 (10.1.23-9+deb9u1) ...
Selecting previously unselected package mariadb-server.
Preparing to unpack .../mariadb-server_10.1.23-9+deb9u1_all.deb ...
Unpacking mariadb-server (10.1.23-9+deb9u1) ...
Setting up mariadb-server-core-10.1 (10.1.23-9+deb9u1) ...
Setting up socat (1.7.3.1-2+b1) ...
Setting up galera-3 (25.3.19-2) ...
Processing triggers for systemd (232-25) ...
Processing triggers for man-db (2.7.6.1-2) ...
Setting up mariadb-server-10.1 (10.1.23-9+deb9u1) ...
Job for mariadb.service failed because the control process exited with
error code.
See "systemctl status mariadb.service" and "journalctl -xe" for details.
invoke-rc.d: initscript mysql, action "start" failed.
● mariadb.service - MariaDB database server
   Loaded: loaded (/lib/systemd/system/mariadb.service; enabled; vendor
preset: enabled)
   Active: failed (Result: exit-code) since Wed 2017-07-05 16:12:24 PDT;
15ms ago
  Process: 22411 ExecStart=/usr/sbin/mysqld $MYSQLD_OPTS
$_WSREP_NEW_CLUSTER $_WSREP_START_POSITION (code=exited,
status=227/NO_NEW_PRIVILEGES)
  Process: 22319 ExecStartPre=/bin/sh -c [ ! -e /usr/bin/galera_recovery ]
&& VAR= ||   VAR=`/usr/bin/galera_recovery`; [ $? -eq 0 ]   && systemctl
set-environment _WSREP_START_POSITION=$VAR || exit 1 (code=exited,
status=0/SUCCESS)
  Process: 22315 ExecStartPre=/bin/sh -c systemctl unset-environment
_WSREP_START_POSITION (code=exited, status=0/SUCCESS)
  Process: 22312 ExecStartPre=/usr/bin/install -m 755 -o mysql -g root -d
/var/run/mysqld (code=exited, status=0/SUCCESS)
 Main PID: 22411 (code=exited, status=227/NO_NEW_PRIVILEGES)

Jul 05 16:12:24 ozzloy.lifeafterking.org systemd[1]: Starting MariaDB
databas…..
Jul 05 16:12:24 ozzloy.lifeafterking.org systemd[22411]: mariadb.service:
Fai…nt
Jul 05 16:12:24 ozzloy.lifeafterking.org systemd[1]: mariadb.service: Main
pr…ES
Jul 05 16:12:24 ozzloy.lifeafterking.org systemd[1]: Failed to start
MariaDB …r.
Jul 05 16:12:24 ozzloy.lifeafterking.org systemd[1]: mariadb.service: Unit
en…e.
Jul 05 16:12:24 ozzloy.lifeafterking.org systemd[1]: mariadb.service:
Failed …'.
Hint: Some lines were ellipsized, use -l to show in full.
dpkg: error processing package mariadb-server-10.1 (--configure):
 subprocess installed post-installation script returned error exit status 1
dpkg: dependency problems prevent configuration of mariadb-server:
 mariadb-server depends on mariadb-server-10.1 (>= 10.1.23-9+deb9u1);
however:
  Package mariadb-server-10.1 is not configured yet.

dpkg: error processing package mariadb-server (--configure):
 dependency problems - leaving unconfigured
Errors were encountered while processing:
 mariadb-server-10.1
 mariadb-server
E: Sub-process /usr/bin/dpkg returned an error code (1)
ozzloy:~/ $
 [16:12:25]
ozzloy:~/ $
 [16:12:30]
ozzloy:~/ $
 [16:12:30]
ozzloy:~/ $
 [16:12:30]
ozzloy:~/ $
 [16:12:31]
ozzloy:~/ $
 [16:12:31]
##################################################
##################################################
** uninstall mariadb-server-10.1
ozzloy:~/ $ sudo apt-get remove --autoremove -y mariadb-server-10.1
 [16:12:31]
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be REMOVED:
  galera-3 mariadb-server mariadb-server-10.1 mariadb-server-core-10.1 socat
0 upgraded, 0 newly installed, 5 to remove and 0 not upgraded.
2 not fully installed or removed.
After this operation, 109 MB disk space will be freed.
(Reading database ... 228433 files and directories currently installed.)
Removing mariadb-server (10.1.23-9+deb9u1) ...
Removing mariadb-server-10.1 (10.1.23-9+deb9u1) ...
Removing galera-3 (25.3.19-2) ...
Removing mariadb-server-core-10.1 (10.1.23-9+deb9u1) ...
Removing socat (1.7.3.1-2+b1) ...
Processing triggers for man-db (2.7.6.1-2) ...
ozzloy:~/ $
 [16:12:44]
ozzloy:~/ $
 [16:12:45]
ozzloy:~/ $
 [16:12:45]
ozzloy:~/ $
 [16:12:45]
ozzloy:~/ $
 [16:12:45]
##################################################
##################################################
** add mariadb systemd configuration
ozzloy:~/ $ sudo systemctl edit mariadb.service
 [16:12:46]
ozzloy:~/ $ cat /etc/systemd/system/mariadb.service.d/override.conf
 [16:13:10]
[Service]
PrivateDevices=false
NoNewPrivileges=false

ozzloy:~/ $
 [16:13:26]
ozzloy:~/ $
 [16:13:31]
ozzloy:~/ $
 [16:13:31]
ozzloy:~/ $
 [16:13:31]
ozzloy:~/ $
 [16:13:31]
##################################################
##################################################
** clean install mariadb-server with override.conf in place ahead of time
ozzloy:~/ $ sudo apt-get install -y mariadb-server
[16:13:31]
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  galera-3 mariadb-server-10.1 mariadb-server-core-10.1 socat
Suggested packages:
  mariadb-test netcat-openbsd tinyca
The following NEW packages will be installed:
  galera-3 mariadb-server mariadb-server-10.1 mariadb-server-core-10.1 socat
0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/11.8 MB of archives.
After this operation, 109 MB of additional disk space will be used.
Preconfiguring packages ...
Selecting previously unselected package galera-3.
(Reading database ... 228172 files and directories currently installed.)
Preparing to unpack .../galera-3_25.3.19-2_amd64.deb ...
Unpacking galera-3 (25.3.19-2) ...
Selecting previously unselected package mariadb-server-core-10.1.
Preparing to unpack .../mariadb-server-core-10.1_10.1.23-9+deb9u1_amd64.deb
...
Unpacking mariadb-server-core-10.1 (10.1.23-9+deb9u1) ...
Selecting previously unselected package socat.
Preparing to unpack .../socat_1.7.3.1-2+b1_amd64.deb ...
Unpacking socat (1.7.3.1-2+b1) ...
Selecting previously unselected package mariadb-server-10.1.
Preparing to unpack .../mariadb-server-10.1_10.1.23-9+deb9u1_amd64.deb ...
/var/lib/mysql: found previous version 10.1
Unpacking mariadb-server-10.1 (10.1.23-9+deb9u1) ...
Selecting previously unselected package mariadb-server.
Preparing to unpack .../mariadb-server_10.1.23-9+deb9u1_all.deb ...
Unpacking mariadb-server (10.1.23-9+deb9u1) ...
Setting up mariadb-server-core-10.1 (10.1.23-9+deb9u1) ...
Setting up socat (1.7.3.1-2+b1) ...
Setting up galera-3 (25.3.19-2) ...
Processing triggers for systemd (232-25) ...
Processing triggers for man-db (2.7.6.1-2) ...
Setting up mariadb-server-10.1 (10.1.23-9+deb9u1) ...
Setting up mariadb-server (10.1.23-9+deb9u1) ...
ozzloy:~/ $
 [16:14:13]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-mysql-maint/attachments/20170706/9572e927/attachment-0003.html>