Merge ~paelzer/ubuntu/+source/pollinate:lp-1848923-cache-directory-HIRSUTE into ubuntu/+source/pollinate:ubuntu/hirsute-devel

[Christian Ehrhardt ]

[Christian Ehrhardt  (paelzer)]

PPA: https://launchpad.net/~paelzer/+archive/ubuntu/lp-1848923-pollinate-var-cache-dir

[Martin Pitt (pitti)]

That looks great, thanks Christian! (Yay code → declaration)

review: Approve

[Christian Ehrhardt  (paelzer)]

On upgrade (as before) it does not restart as the path exists already:

  Condition: start condition failed at Tue 2021-02-09 10:49:28 UTC; 3s ago
             └─ ConditionPathExists=!/var/cache/pollinate/seeded was not met

The old pre-existing path is NOT killed/removed which is good.

If someone clears /var/cache on next service start (e.g. reboot) the path it
a) recreated as before (same owner)
b) the service runs again as expected

sudo ls -laF /var/cache/pollinate/; systemctl status pollinate
total 8
drwxr-xr-x 2 pollinate daemon 4096 Feb 9 10:51 ./
drwxr-xr-x 13 root root 4096 Feb 9 10:51 ../
-rw-r--r-- 1 pollinate daemon 0 Feb 9 10:51 seeded
● pollinate.service - Pollinate to seed the pseudo random number generator
     Loaded: loaded (/lib/systemd/system/pollinate.service; enabled; vendor preset: enabled)
     Active: inactive (dead) since Tue 2021-02-09 10:51:28 UTC; 14s ago
       Docs: https://launchpad.net/pollinate
    Process: 595 ExecStart=/usr/bin/pollinate (code=exited, status=0/SUCCESS)
   Main PID: 595 (code=exited, status=0/SUCCESS)

Feb 09 10:51:27 h-pol systemd[1]: Starting Pollinate to seed the pseudo random number generator...
Feb 09 10:51:27 h-pol pollinate[661]: client sent challenge to [https://entropy.ubuntu.com/]
Feb 09 10:51:28 h-pol pollinate[708]: client verified challenge/response with [https://entropy.ubuntu.com/]
Feb 09 10:51:28 h-pol pollinate[717]: client hashed response from [https://entropy.ubuntu.com/]
Feb 09 10:51:28 h-pol pollinate[718]: client successfully seeded [/dev/urandom]
Feb 09 10:51:28 h-pol systemd[1]: pollinate.service: Succeeded.
Feb 09 10:51:28 h-pol systemd[1]: Finished Pollinate to seed the pseudo random number generator.

Yet there is a difference in the permissions
old:
drwxr-x--- 2 pollinate daemon 4096 Feb 5 07:57 ./
new:
drwxr-xr-x 2 pollinate daemon 4096 Feb 9 10:51 ./

This should do the trick:
CacheDirectoryMode=0750

[Christian Ehrhardt  (paelzer)]

Indeed that works as intended, the recreated path now is:
  drwxr-x--- 2 pollinate daemon 4096 Feb 9 10:55 ./

[Christian Ehrhardt  (paelzer)]

PPA: is rebuilt and ready for the MP review

[Robie Basak (racb)]

lgtm. However, note that the CacheDirectory directive doesn't appear available in Xenial (at least I don't see it in http://manpages.ubuntu.com/manpages/xenial/en/man7/systemd.directives.7.html but it is in http://manpages.ubuntu.com/manpages/bionic/en/man7/systemd.directives.7.html). The pollinate has been backported from Focal to Xenial before. A decision needs to be made on whether we want to retain backwards compatibility back to Xenial on the packaging in Hirsute, or suffer more backporting pain instead. If the latter, we need to ensure that this doesn't get missed if the package is backported.

review: Approve

[Christian Ehrhardt  (paelzer)]

Indeed, I've given this a try on Xenial and there it does nothing which leads to expose the same issue that was initially reported. We can avoid that someone fail-backports it to Xenial though by just keeping the mkdir in the postinst intact. That has no changed behavior going forward, but will work on backports.

When submitting the same to Debian I'll not include it though, but before that is back in Ubunutu there will be no Xenial support anymore.

[Christian Ehrhardt  (paelzer)]

I've modified the code according to the discussion and submitted it to Debian
=> https://salsa.debian.org/alteholz/pollinate/-/merge_requests/1

For Hirsute this is ready and I'll upload it now:

To ssh://git.launchpad.net/ubuntu/+source/pollinate
 * [new tag] upload/4.33-3ubuntu2 -> upload/4.33-3ubuntu2

Uploading to ubuntu (via ftp to upload.ubuntu.com):
  Uploading pollinate_4.33-3ubuntu2.dsc: done.
  Uploading pollinate_4.33-3ubuntu2.debian.tar.xz: done.
  Uploading pollinate_4.33-3ubuntu2_source.buildinfo: done.
  Uploading pollinate_4.33-3ubuntu2_source.changes: done.
Successfully uploaded packages.

diff --git a/debian/changelog b/debian/changelog
index f2001d3..e5ea48d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+pollinate (4.33-3ubuntu2) hirsute; urgency=medium
+
+  * d/pollinate.postinst, d/pollinate.service: put cache directory creation
+    under systemd's control avoiding issues on cleaned /var/cache directories
+    (LP: #1848923)
+
+ -- Christian Ehrhardt <[e-mail]>  Tue, 09 Feb 2021 10:57:54 +0100
+
 pollinate (4.33-3ubuntu1) focal; urgency=medium
 
   * Merge with Debian unstable. Remaining changes:
diff --git a/debian/pollinate.postinst b/debian/pollinate.postinst
index ceea566..b47325c 100644
--- a/debian/pollinate.postinst
+++ b/debian/pollinate.postinst
@@ -7,9 +7,5 @@ PKG="pollinate"
 if ! getent passwd $PKG >/dev/null; then
 	adduser --disabled-password --quiet --system --home /var/cache/$PKG --ingroup daemon --shell /bin/false $PKG
 fi
-mkdir -p /var/cache/$PKG
-chown -f $PKG /var/cache/$PKG
-rm -f /var/cache/$PKG/tag
-
 
 #DEBHELPER#
diff --git a/debian/pollinate.service b/debian/pollinate.service
index 4883f63..a4c9da9 100644
--- a/debian/pollinate.service
+++ b/debian/pollinate.service
@@ -9,6 +9,8 @@ Documentation=https://launchpad.net/pollinate
 [Service]
 User=pollinate
 ExecStart=/usr/bin/pollinate
+CacheDirectory=pollinate
+CacheDirectoryMode=0750
 Type=oneshot
 
 [Install]