[Pkg-nagios-devel] Bug#953425: icinga2: Function call 'mkstemp' for file [..] failed with error code 13, 'Permission denied'

[Humberto Flores III]

Package: icinga2
Version: 2.11.3-1
Severity: important

Dear Maintainer,

    * What led up to the situation?

    On a fresh Debian testing and icinga2 install I ran: $ sudo icinga2 api setup


    * What was the outcome of this action?

    icinga at icinga:~$ sudo icinga2 api setup
    information/cli: Generating new CA.
    information/base: Writing private key to '/var/lib/icinga2/ca//ca.key'.
    information/base: Writing X509 certificate to '/var/lib/icinga2/ca//ca.crt'.
    information/cli: Generating new CSR in '/var/lib/icinga2/certs//icinga.csr'.
    information/base: Writing private key to '/var/lib/icinga2/certs//icinga.key'.
    information/base: Writing certificate signing request to '/var/lib/icinga2/certs//icinga.csr'.
    information/cli: Signing CSR with CA and writing certificate to '/var/lib/icinga2/certs//icinga.crt'.
    information/pki: Writing certificate to file '/var/lib/icinga2/certs//icinga.crt'.
    information/cli: Copying CA certificate to '/var/lib/icinga2/certs//ca.crt'.
    information/cli: Adding new ApiUser 'root' in '/etc/icinga2/conf.d/api-users.conf'.
    critical/Application: Error: Function call 'mkstemp' for file '/etc/icinga2/conf.d/api-users.conf.XXXXXX' failed with error code 13, 'Permission denied'

    Additional information is available in '/var/log/icinga2/crash/report.1583766708.079641'

    Aborted


    * What outcome did you expect instead?

    icinga at icinga:~$ sudo icinga2 api setup
    information/cli: Generating new CA.
    information/base: Writing private key to '/var/lib/icinga2/ca//ca.key'.
    information/base: Writing X509 certificate to '/var/lib/icinga2/ca//ca.crt'.
    information/cli: Generating new CSR in '/var/lib/icinga2/certs//icinga.csr'.
    information/base: Writing private key to '/var/lib/icinga2/certs//icinga.key'.
    information/base: Writing certificate signing request to '/var/lib/icinga2/certs//icinga.csr'.
    information/cli: Signing CSR with CA and writing certificate to '/var/lib/icinga2/certs//icinga.crt'.
    information/pki: Writing certificate to file '/var/lib/icinga2/certs//icinga.crt'.
    information/cli: Copying CA certificate to '/var/lib/icinga2/certs//ca.crt'.
    information/cli: Adding new ApiUser 'root' in '/etc/icinga2/conf.d/api-users.conf'.
    information/cli: Enabling the 'api' feature.
    Enabling feature api. Make sure to restart Icinga 2 for these changes to take effect.
    information/cli: Updating 'NodeName' constant in '/etc/icinga2/constants.conf'.
    information/cli: Created backup file '/etc/icinga2/constants.conf.orig'.
    information/cli: Updating 'ZoneName' constant in '/etc/icinga2/constants.conf'.
    information/cli: Backup file '/etc/icinga2/constants.conf.orig' already exists. Skipping backup.
    Done.

    Now restart your Icinga 2 daemon to finish the installation!



-- System Information:
Debian Release: bullseye/sid
   APT prefers testing
   APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.4.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages icinga2 depends on:
ii  icinga2-bin     2.11.3-1
ii  icinga2-common  2.11.3-1

Versions of packages icinga2 recommends:
ii  icinga2-doc                                      2.11.3-1
ii  libreadline7                                     7.0-5
ii  monitoring-plugins-basic [nagios-plugins-basic]  2.2-6

Versions of packages icinga2 suggests:
pn  vim-icinga2  <none>

-- no debconf information