[Pkg-puppet-devel] Bug#1033005: puppetdb: "fresh" installion results in "permission denied for table schema_migrations"

[CSights]

Package: puppetdb
Version: 7.12.1-3
Severity: grave
Justification: renders package unusable


Greetings,

Setting up puppetdb with a empty database seems to not succeed.  puppetdb fails to start and issues
the message:

"Execution error (PSQLException) at org.postgresql.core.v3.QueryExecutorImpl/receiveErrorResponse (QueryExecutorImpl.java:2676).\nERROR: permission denied for table schema_migrations\n",

The reason why I put "fresh" in quotes is that actually what I'm doing is purging puppetdb,
installing puppetdb, then running 'dpkg-reconfigure puppetdb'.  During the purge of puppetdb
dbconfig prompts whether to remove the old DB and I choose "yes".  I keep the default answers
when running 'dpkg-reconfigure puppetdb'.

I haven't attempted to look at the DB permissions for the table schema_migrations, but it seems
likely the puppetdb user doesn't have access.

Thanks for your time!
C.



-- System Information:
Debian Release: 12.0
  APT prefers testing-security
  APT policy: (500, 'testing-security'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-5-amd64 (SMP w/2 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages puppetdb depends on:
ii  adduser                                    3.131
ii  dbconfig-pgsql                             2.0.24
ii  debconf [debconf-2.0]                      1.5.82
ii  default-jre-headless                       2:1.17-74
ii  init-system-helpers                        1.65.2
ii  libasm-java                                9.4-1
ii  libat-at-clojure                           1.2.0-1.1
ii  libbidi-clojure                            2.1.6-2
ii  libcheshire-clojure                        5.11.0-2
ii  libclj-digest-clojure                      1.4.9+dfsg-1
ii  libclj-http-clojure                        2.3.0-1.1
ii  libclj-stacktrace-clojure                  0.2.7-1
ii  libclj-time-clojure                        0.15.2-2
ii  libclojure-java                            1.11.1-2
ii  libcommons-io-java                         2.11.0-2
ii  libcommons-lang3-java                      3.12.0-2
ii  libcommons-logging-java                    1.2-3
ii  libcompojure-clojure                       1.6.0-1.1
ii  libcore-async-clojure                      1.5.648-1
ii  libcore-match-clojure                      1.0.0-1
ii  libcore-memoize-clojure                    1.0.257-1
ii  libdata-priority-map-clojure               1.1.0-3
ii  libdujour-version-check-clojure            0.2.3-1
ii  libdynapath-clojure                        1.0.0-3
ii  libfast-zip-visit-clojure                  1.0.2-3
ii  libgeronimo-j2ee-management-1.1-spec-java  1.0.1-1.1
ii  libgeronimo-jms-1.1-spec-java              1.1.1-1
ii  libhikaricp-java                           2.7.9-1
ii  libhoneysql-clojure                        2.4.962+really2.3.911-1
ii  libinstaparse-clojure                      1.4.7-1.1
ii  libjava-jdbc-clojure                       0.7.10-1
ii  libjava-jmx-clojure                        0.3.4-1.1
ii  libkitchensink-clojure                     3.2.1-1
ii  libmath-combinatorics-clojure              0.1.4-1.1
ii  libmetrics-clojure                         2.9.0-2.1
ii  libmurphy-clojure                          0.5.2-2
ii  libpostgresql-jdbc-java                    42.5.4-1
ii  libpuppetlabs-i18n-clojure                 0.9.2-2
ii  libraynes-fs-clojure                       1.5.2-1
ii  libring-core-clojure                       1.8.2-2
ii  librobert-hooke-clojure                    1.3.0-4
ii  libslf4j-java                              1.7.32-1
ii  libspecter-clojure                         1.0.2-2.1
ii  libstockpile-clojure                       0.0.4-1.1
ii  libstructured-logging-clojure              0.2.0-4
ii  libtools-logging-clojure                   1.2.4-2
ii  libtools-macro-clojure                     0.1.5-2
ii  libtools-namespace-clojure                 0.2.11-1.1
ii  libtrapperkeeper-authorization-clojure     1.0.0-4
ii  libtrapperkeeper-clojure                   3.2.0-4
ii  libtrapperkeeper-metrics-clojure           1.5.0-5
ii  libtrapperkeeper-scheduler-clojure         1.1.3-7
ii  libtrapperkeeper-status-clojure            1.1.1-4
ii  libtrapperkeeper-webserver-jetty9-clojure  4.4.1-5
ii  libversioneer-clojure                      0.2.0-1
ii  ucf                                        3.0043+nmu1

puppetdb recommends no packages.

Versions of packages puppetdb suggests:
pn  libnippy-clojure    <none>
ii  postgresql          15+247
pn  postgresql-contrib  <none>

-- debconf information:
  puppetdb/app-password-confirm: (password omitted)
  puppetdb/password-confirm: (password omitted)
  puppetdb/pgsql/app-pass: (password omitted)
  puppetdb/pgsql/admin-pass: (password omitted)
  puppetdb/dbconfig-upgrade: true
* puppetdb/db/app-user: puppetdb at localhost
  puppetdb/install-error: abort
  puppetdb/internal/skip-preseed: false
  puppetdb/remove-error: abort
* puppetdb/remote/port: 5432
  puppetdb/missing-db-package-error: abort
  puppetdb/internal/reconfiguring: false
  puppetdb/upgrade-error: abort
  puppetdb/upgrade-backup: true
* puppetdb/pgsql/admin-user: postgres
  puppetdb/database-type: pgsql
  puppetdb/dbconfig-remove: true
  puppetdb/remote/newhost: localhost
* puppetdb/db/dbname: puppetdb
* puppetdb/dbconfig-install: true
* puppetdb/remote/host: localhost
  puppetdb/pgsql/changeconf: false
  puppetdb/purge: false
* puppetdb/dbconfig-reinstall: true
* puppetdb/pgsql/authmethod-user: password
* puppetdb/pgsql/authmethod-admin: ident
  puppetdb/passwords-do-not-match:
* puppetdb/pgsql/method: TCP/IP
  puppetdb/pgsql/manualconf:
  puppetdb/pgsql/no-empty-passwords: