[Pkg-puppet-devel] Bug#825719: Puppet cleans /var/lib/puppet while upgrade

[Klaus Ethgen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package: puppet
Version: 4.5.0-3
Severity: grave

Upgrade to new puppet release removes all content in /var/lib/puppet,
including all certificates.

After that client is not able anymore to reach the server as there is no
certificate to connect with.

Also the ca.pem is gone so this is also a security risk to contact a
unrelated puppet master afer upgrade!

- -- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (700, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 4.5.3 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages puppet depends on:
ii  adduser                       3.114
ii  facter                        2.4.6-1
ii  hiera                         2.0.0-2
ii  lsb-base                      9.20160110
ii  ruby                          1:2.3.0+4
ii  ruby-augeas                   1:0.5.0-3+b4
ii  ruby-deep-merge               1.0.1+gitf9df6fdb-1
ii  ruby-rgen                     0.7.0-2
ii  ruby-safe-yaml                1.0.4-1
ii  ruby-shadow                   2.4.1-1+b3
ii  ruby1.9.1 [ruby-interpreter]  1.9.3.484-2
ii  ruby2.0 [ruby-interpreter]    2.0.0.484+really457-3
ii  ruby2.1 [ruby-interpreter]    2.1.5-4
ii  ruby2.2 [ruby-interpreter]    2.2.4-1
ii  ruby2.3 [ruby-interpreter]    2.3.1-1
ii  sysv-rc                       2.88dsf-59.4

Versions of packages puppet recommends:
ii  debconf-utils  1.5.59
ii  lsb-release    9.20160110
pn  ruby-selinux   <none>

Versions of packages puppet suggests:
pn  ruby-rrd  <none>

- -- no debconf information

- -- 
Klaus Ethgen                              http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16   Klaus Ethgen <Klaus at Ethgen.ch>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Charset: ISO-8859-1
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=ZvK/
-----END PGP SIGNATURE-----