Bug#1002993: systemd: Setting access ACL: invalid argument (Upgrade to 247.3-6 from buster to bullseye in container)

[Tobias Frost]

On Sun, Jan 02, 2022 at 03:24:57PM +0100, Michael Biebl wrote:
> 
> Control: tags -1 + moreinfo unreproducible
> 
> On 02.01.22 14:52, Tobias Frost wrote:
> 
> > Please let me know if there are additional details I could supply.
> > 
> 
> 
> Can you provide steps how to reproduce the issue?

> More details how the container is constructed, which fs is used etc. might
> help as well.

When I find a way to reproduce, I'll let you know.

I ran into it by "apt upgrade" after changing sources.list from buster to bullseye.
The container created with debootstrap, possibly a stretch release at that debootstrap time (IIRC).

Filesystem ia an ext4 on a lvm, backed by a raid1.

> What does
> SYSTEMD_LOG_LEVEL=debug systemd-tmpfiles --create --prefix /var/log/journal
> say?

thecus:/home/tobi# machinectl shell ubiquiti
Connected to machine ubiquiti. Press ^] three times within 1s to exit session.
root at thecus:~# SYSTEMD_LOG_LEVEL=debug systemd-tmpfiles --create --prefix /var/log/journal
Looking for configuration files in (higher priority first):
	/etc/tmpfiles.d
	/run/tmpfiles.d
	/usr/local/lib/tmpfiles.d
	/usr/lib/tmpfiles.d
	/lib/tmpfiles.d
SELinux enabled state cached to: disabled
Skipping overridden file '/usr/lib/tmpfiles.d/screen-cleanup.conf'.
Reading config file "/usr/lib/tmpfiles.d/dbus.conf"…
Entry "/var/lib/dbus" does not match any include prefix, skipping.
Entry "/var/lib/dbus/machine-id" does not match any include prefix, skipping.
Reading config file "/usr/lib/tmpfiles.d/debian.conf"…
Entry "/run/shm" does not match any include prefix, skipping.
Entry "/run/sendsigs.omit.d" does not match any include prefix, skipping.
Entry "/etc/mtab" does not match any include prefix, skipping.
Reading config file "/usr/lib/tmpfiles.d/home.conf"…
Entry "/home" does not match any include prefix, skipping.
Entry "/srv" does not match any include prefix, skipping.
Reading config file "/usr/lib/tmpfiles.d/journal-nocow.conf"…
Entry "/var/log/journal" matches include prefix "/var/log/journal".
Entry "/var/log/journal/0168a64537e84260bcb1172567dbc16e" matches include prefix "/var/log/journal".
Entry "/var/log/journal/remote" matches include prefix "/var/log/journal".
Reading config file "/usr/lib/tmpfiles.d/legacy.conf"…
Entry "/var/lock" does not match any include prefix, skipping.
Entry "/run/lock/subsys" does not match any include prefix, skipping.
/usr/lib/tmpfiles.d/legacy.conf:24: Ignoring entry r! "/forcefsck" because --boot is not specified.
/usr/lib/tmpfiles.d/legacy.conf:25: Ignoring entry r! "/fastboot" because --boot is not specified.
/usr/lib/tmpfiles.d/legacy.conf:26: Ignoring entry r! "/forcequotacheck" because --boot is not specified.
Reading config file "/usr/lib/tmpfiles.d/passwd.conf"…
/usr/lib/tmpfiles.d/passwd.conf:3: Ignoring entry r! "/etc/gshadow.lock" because --boot is not specified.
/usr/lib/tmpfiles.d/passwd.conf:4: Ignoring entry r! "/etc/shadow.lock" because --boot is not specified.
/usr/lib/tmpfiles.d/passwd.conf:5: Ignoring entry r! "/etc/passwd.lock" because --boot is not specified.
/usr/lib/tmpfiles.d/passwd.conf:6: Ignoring entry r! "/etc/group.lock" because --boot is not specified.
/usr/lib/tmpfiles.d/passwd.conf:7: Ignoring entry r! "/etc/subuid.lock" because --boot is not specified.
/usr/lib/tmpfiles.d/passwd.conf:8: Ignoring entry r! "/etc/subgid.lock" because --boot is not specified.
Reading config file "/etc/tmpfiles.d/screen-cleanup.conf"…
Entry "/run/screen" does not match any include prefix, skipping.
Reading config file "/usr/lib/tmpfiles.d/systemd-nologin.conf"…
/usr/lib/tmpfiles.d/systemd-nologin.conf:11: Ignoring entry F! "/run/nologin" because --boot is not specified.
Reading config file "/usr/lib/tmpfiles.d/systemd-pstore.conf"…
Entry "/var/lib/systemd/pstore" does not match any include prefix, skipping.
Reading config file "/usr/lib/tmpfiles.d/systemd-tmp.conf"…
Entry "/tmp/systemd-private-7ca11069754049cab705a4d6f1b76e98-*" does not match any include prefix, skipping.
Entry "/tmp/systemd-private-7ca11069754049cab705a4d6f1b76e98-*/tmp" does not match any include prefix, skipping.
Entry "/var/tmp/systemd-private-7ca11069754049cab705a4d6f1b76e98-*" does not match any include prefix, skipping.
Entry "/var/tmp/systemd-private-7ca11069754049cab705a4d6f1b76e98-*/tmp" does not match any include prefix, skipping.
/usr/lib/tmpfiles.d/systemd-tmp.conf:17: Ignoring entry R! "/tmp/systemd-private-*" because --boot is not specified.
/usr/lib/tmpfiles.d/systemd-tmp.conf:18: Ignoring entry R! "/var/tmp/systemd-private-*" because --boot is not specified.
Entry "/var/lib/systemd/coredump/.#core*.7ca11069754049cab705a4d6f1b76e98*" does not match any include prefix, skipping.
/usr/lib/tmpfiles.d/systemd-tmp.conf:23: Ignoring entry r! "/var/lib/systemd/coredump/.#*" because --boot is not specified.
Reading config file "/usr/lib/tmpfiles.d/systemd.conf"…
Entry "/run/user" does not match any include prefix, skipping.
/usr/lib/tmpfiles.d/systemd.conf:11: Ignoring entry F! "/run/utmp" because --boot is not specified.
Entry "/run/systemd/ask-password" does not match any include prefix, skipping.
Entry "/run/systemd/seats" does not match any include prefix, skipping.
Entry "/run/systemd/sessions" does not match any include prefix, skipping.
Entry "/run/systemd/users" does not match any include prefix, skipping.
Entry "/run/systemd/machines" does not match any include prefix, skipping.
Entry "/run/systemd/shutdown" does not match any include prefix, skipping.
Entry "/run/systemd/netif" does not match any include prefix, skipping.
Entry "/run/systemd/netif/links" does not match any include prefix, skipping.
Entry "/run/systemd/netif/leases" does not match any include prefix, skipping.
Entry "/run/systemd/netif/lldp" does not match any include prefix, skipping.
Entry "/run/log" does not match any include prefix, skipping.
Entry "/run/log/journal" does not match any include prefix, skipping.
Entry "/run/log/journal/0168a64537e84260bcb1172567dbc16e" does not match any include prefix, skipping.
Entry "/run/log/journal" does not match any include prefix, skipping.
Entry "/run/log/journal/0168a64537e84260bcb1172567dbc16e" does not match any include prefix, skipping.
Entry "/run/log/journal/0168a64537e84260bcb1172567dbc16e/*.journal*" does not match any include prefix, skipping.
Entry "/var/log/journal" matches include prefix "/var/log/journal".
Entry "/var/log/journal/0168a64537e84260bcb1172567dbc16e" matches include prefix "/var/log/journal".
Entry "/var/log/journal/0168a64537e84260bcb1172567dbc16e/system.journal" matches include prefix "/var/log/journal".
Entry "/var/log/journal" matches include prefix "/var/log/journal".
Entry "/var/log/journal/0168a64537e84260bcb1172567dbc16e" matches include prefix "/var/log/journal".
Entry "/var/log/journal/0168a64537e84260bcb1172567dbc16e/system.journal" matches include prefix "/var/log/journal".
Entry "/var/lib/systemd" does not match any include prefix, skipping.
Entry "/var/lib/systemd/coredump" does not match any include prefix, skipping.
Entry "/var/lib/private" does not match any include prefix, skipping.
Entry "/var/log/private" does not match any include prefix, skipping.
Entry "/var/cache/private" does not match any include prefix, skipping.
Reading config file "/usr/lib/tmpfiles.d/tmp.conf"…
Entry "/tmp" does not match any include prefix, skipping.
Reading config file "/usr/lib/tmpfiles.d/var.conf"…
Entry "/var" does not match any include prefix, skipping.
Entry "/var/run" does not match any include prefix, skipping.
Entry "/var/log" does not match any include prefix, skipping.
Entry "/var/log/wtmp" does not match any include prefix, skipping.
Entry "/var/log/btmp" does not match any include prefix, skipping.
Entry "/var/log/lastlog" does not match any include prefix, skipping.
Entry "/var/cache" does not match any include prefix, skipping.
Entry "/var/lib" does not match any include prefix, skipping.
Entry "/var/spool" does not match any include prefix, skipping.
Reading config file "/usr/lib/tmpfiles.d/x11.conf"…
/usr/lib/tmpfiles.d/x11.conf:12: Ignoring entry D! "/tmp/.X11-unix" because --boot is not specified.
/usr/lib/tmpfiles.d/x11.conf:13: Ignoring entry D! "/tmp/.ICE-unix" because --boot is not specified.
/usr/lib/tmpfiles.d/x11.conf:14: Ignoring entry D! "/tmp/.XIM-unix" because --boot is not specified.
/usr/lib/tmpfiles.d/x11.conf:15: Ignoring entry D! "/tmp/.font-unix" because --boot is not specified.
/usr/lib/tmpfiles.d/x11.conf:16: Ignoring entry D! "/tmp/.Test-unix" because --boot is not specified.
/usr/lib/tmpfiles.d/x11.conf:19: Ignoring entry r! "/tmp/.X[0-9]*-lock" because --boot is not specified.
Running create action for entry a /var/log/journal
Setting access ACL u::rwx,g::r-x,g:adm:r-x,g:4294967295:r-x,m::r-x,o::r-x on /var/log/journal.
Setting access ACL "u::rwx,g::r-x,g:adm:r-x,g:4294967295:r-x,m::r-x,o::r-x" on /var/log/journal failed: Invalid argument
Running create action for entry h /var/log/journal
Cannot set file attribute for '/var/log/journal', value=0x00800000, mask=0x00800000, ignoring: Operation not supported
Running create action for entry z /var/log/journal
"/var/log/journal" matches mode 2755 already.
Running create action for entry a /var/log/journal/0168a64537e84260bcb1172567dbc16e
Setting access ACL u::rwx,g::r-x,g:adm:r-x,g:4294967295:r-x,m::r-x,o::r-x on /var/log/journal/0168a64537e84260bcb1172567dbc16e.
Setting access ACL "u::rwx,g::r-x,g:adm:r-x,g:4294967295:r-x,m::r-x,o::r-x" on /var/log/journal/0168a64537e84260bcb1172567dbc16e failed: Invalid argument
Running create action for entry h /var/log/journal/0168a64537e84260bcb1172567dbc16e
Cannot set file attribute for '/var/log/journal/0168a64537e84260bcb1172567dbc16e', value=0x00800000, mask=0x00800000, ignoring: Operation not supported
Running create action for entry z /var/log/journal/0168a64537e84260bcb1172567dbc16e
"/var/log/journal/0168a64537e84260bcb1172567dbc16e" matches mode 2755 already.
Failed to determine whether '/var/log/journal/remote' is below autofs, ignoring: No such file or directory
Running create action for entry h /var/log/journal/remote
Running create action for entry a /var/log/journal/0168a64537e84260bcb1172567dbc16e/system.journal
Setting access ACL u::rw-,g::r-x,g:adm:r--,g:4294967295:r-x,m::r--,o::--- on /var/log/journal/0168a64537e84260bcb1172567dbc16e/system.journal.
Setting access ACL "u::rw-,g::r-x,g:adm:r--,g:4294967295:r-x,m::r--,o::---" on /var/log/journal/0168a64537e84260bcb1172567dbc16e/system.journal failed: Invalid argument
Running create action for entry z /var/log/journal/0168a64537e84260bcb1172567dbc16e/system.journal
"/var/log/journal/0168a64537e84260bcb1172567dbc16e/system.journal" matches mode 640 already.