SKS 1.1.3 in root jail

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

SKS 1.1.3 in root jail

Andy Ruddock-2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I've installed sks from Debian unstable in a root jail.
Everything seems to be ok, but when I stop sks I get the following errors :

Stopping sks daemons: sksrecon..Ctrl-C.  Exiting eventloop
._mcleanup: gmon.out: Permission denied
. sksdb..Ctrl-C.  Exiting eventloop
.._mcleanup: gmon.out: Permission denied
. done.

File permissions seem ok, both host and jail have the same /etc/passwd &
/etc/group.

I haven't any other services running from jails, and have no previous
experience of this task.

As an aside, I had the same problems as others have reported whilst
importing the keydump, I used the following script:

- ---------- sksbuild.sh begin ----------
#!/bin/sh

SKSOP=build

if [ -d "DB" ]; then
        echo "DB directory exists, quitting"
        return 0;
fi

for f in dump/*.pgp; do
        echo "Processing: $f"
        sks $SKSOP $f -n 4 -cache 128
        SKSOP=merge
done

return 0
- ---------- sksbuild.sh end ----------


- --
Andy Ruddock
- ------------
[hidden email] (GPG Key ID 0xB0324245)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=hzlJ
-----END PGP SIGNATURE-----

_______________________________________________
Sks-devel mailing list
[hidden email]
https://lists.nongnu.org/mailman/listinfo/sks-devel
Reply | Threaded
Open this post in threaded view
|

Re: SKS 1.1.3 in root jail

Jeffrey Johnson-5

On Jul 3, 2012, at 10:36 AM, Andy Ruddock wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> I've installed sks from Debian unstable in a root jail.
> Everything seems to be ok, but when I stop sks I get the following errors :
>
> Stopping sks daemons: sksrecon..Ctrl-C.  Exiting eventloop
> ._mcleanup: gmon.out: Permission denied
> . sksdb..Ctrl-C.  Exiting eventloop
> .._mcleanup: gmon.out: Permission denied
> . done.
>

These are profiling routines: did you compile with -pg?

73 de Jeff


_______________________________________________
Sks-devel mailing list
[hidden email]
https://lists.nongnu.org/mailman/listinfo/sks-devel
Reply | Threaded
Open this post in threaded view
|

Re: SKS 1.1.3 in root jail

Jeffrey Johnson-5

On Jul 3, 2012, at 11:05 AM, Jeffrey Johnson wrote:

>
> On Jul 3, 2012, at 10:36 AM, Andy Ruddock wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA512
>>
>> I've installed sks from Debian unstable in a root jail.
>> Everything seems to be ok, but when I stop sks I get the following errors :
>>
>> Stopping sks daemons: sksrecon..Ctrl-C.  Exiting eventloop
>> ._mcleanup: gmon.out: Permission denied
>> . sksdb..Ctrl-C.  Exiting eventloop
>> .._mcleanup: gmon.out: Permission denied
>> . done.
>>
>
> These are profiling routines: did you compile with -pg?
>

This link describes a solution for dropping privileges when profiling:
        https://wiki.icinga.org/display/Dev/Profiling

The error is likely harmless no matter what.

hth

73 de Jeff


_______________________________________________
Sks-devel mailing list
[hidden email]
https://lists.nongnu.org/mailman/listinfo/sks-devel
Reply | Threaded
Open this post in threaded view
|

Re: SKS 1.1.3 in root jail

Andy Ruddock-2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Jeffrey Johnson wrote:

>
> On Jul 3, 2012, at 11:05 AM, Jeffrey Johnson wrote:
>
>>
>> On Jul 3, 2012, at 10:36 AM, Andy Ruddock wrote:
>>
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>> Hash: SHA512
>>>
>>> I've installed sks from Debian unstable in a root jail.
>>> Everything seems to be ok, but when I stop sks I get the following errors :
>>>
>>> Stopping sks daemons: sksrecon..Ctrl-C.  Exiting eventloop
>>> ._mcleanup: gmon.out: Permission denied
>>> . sksdb..Ctrl-C.  Exiting eventloop
>>> .._mcleanup: gmon.out: Permission denied
>>> . done.
>>>
>>
>> These are profiling routines: did you compile with -pg?
>>
>
> This link describes a solution for dropping privileges when profiling:
> https://wiki.icinga.org/display/Dev/Profiling
>
> The error is likely harmless no matter what.
>
> hth
>
> 73 de Jeff
>

I used the Debian packages.
I've just got the source package for sks and -pg is one of the
COMMONCAMLFLAGS, so profiling was probably compiled in.
I don't stop the server very often anyway, so as long as it doesn't lead
to database corruption I'm happy to leave it as is.

Thanks,

- --
Andy Ruddock
- ------------
[hidden email] (GPG Key ID 0xB0324245)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBCgAGBQJP8xmJAAoJECqtbbewMkJFUMgQAI9gJvnL965AzXdlBo3Li1e8
ty590Oe5cWSpv89Uuht2pyDTL8CLfalF3LgU1JOjrE/Ya9HkyHMVsZS4NBUYtps8
7zWhGUNIA/6llZgjSidDeMUtepX3xnKwcIxEGhR5z1G2/RRSAs/J7xDJZ+RREUNN
YJP6IucdIdaQd+pJMJ57YNn3dxkPRbmxH8NUGV7vjsCyTc2ycBfgyuGbhe+NPifd
PNOy0INPY4SimDyWkrGb4RvTOp1czWiFvoZWreIgIoTdrJaR+37nmEoFvK4hwuYa
9E39h6fbofbMCtgnadMjW5R50BMMxRWWh87xBzDjwwT2TtGr8LhYSGUHLR1lzXe7
ANXReUfsBj8EI04UhixSM643qp8vXmU4tOV5sR7VrCAlfD5bGR550zniDh9P/Ic5
8rAIt6BdSlhgjf9bSrdCSiKPu3CTFLl2HpsE1TZhzWuZhHC7NPAKOeeHV2WUk8cF
k2/ENW9Z1KqcaafUhoG6xpyLykDdpouZiDfshR2o3Yu6QG+STEQVlSvaNm+qlTpv
Jk0YhZnWxAzCMcZCJ+GxZaQgcUVkB57rIOalbe0ohKKL+93c47p1i/OnoQdeIcxU
w4SgFVPByM6HULGiyafgviO0AUsvVEKSDTDSGbwXukKmHA19VNJnBaCSnoshUhwD
feQ1Uf0JhrPjZCx3Dpsn
=BhF3
-----END PGP SIGNATURE-----

_______________________________________________
Sks-devel mailing list
[hidden email]
https://lists.nongnu.org/mailman/listinfo/sks-devel
Reply | Threaded
Open this post in threaded view
|

Re: SKS 1.1.3 in root jail

Jeffrey Johnson-5

On Jul 3, 2012, at 12:10 PM, Andy Ruddock wrote:

>
> I used the Debian packages.
> I've just got the source package for sks and -pg is one of the
> COMMONCAMLFLAGS, so profiling was probably compiled in.
> I don't stop the server very often anyway, so as long as it doesn't lead
> to database corruption I'm happy to leave it as is.
>

Might lead to Debian (but not database) corruption …

 The flaw has nothing whatsoever to do with SKS if Debian insists on -pg
and you want SKS in a jail.

73 de Jeff




_______________________________________________
Sks-devel mailing list
[hidden email]
https://lists.nongnu.org/mailman/listinfo/sks-devel