Bug#928756: debian-edu-config: search domain not configured correctly on diskless workstations in subnet00

classic Classic list List threaded Threaded
13 messages Options
Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config: search domain not configured correctly on diskless workstations in subnet00

Dominik George-7
Package: debian-edu-config
Version: 2.10.64
Severity: important

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The following misbehaviour occurs reproducibly in a new installation of
Debian Edu buster.

 1. Install a combined server like normal.
 2. Add a machine on the LTSP network 192.168.0.0/32 as in the screenshot.
 3. Boot that machine as diskless workstation.

If done like that, the /etc/resolv.conf generated at boot by ltsp-init with
the information provided by 08-edu-hostname is missing a search domain entry
(it should probably be subnet00.intern intern).  Thus, short hostnames, like
used by the default Firefox start page, are not resolvable.

The configuration of the search domain works perfectly on the main network
10.0.0.0/16.

I only tested on (two different) combined servers, not on a dedicated
terminal server.

- -- System Information:
Debian Release: buster/sid
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-4-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_FIRMWARE_WORKAROUND, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages debian-edu-config depends on:
ii  bind9-host                       1:9.11.5.P4+dfsg-1
ii  cfengine3                        3.12.1-2
ii  debconf [debconf-2.0]            1.5.71
ii  debconf-utils                    1.5.71
ii  debian-edu-artwork               2.10.5-1
ii  desktop-profiles                 1.4.30
ii  e2fsprogs                        1.44.5-1
ii  education-tasks                  2.10.47
ii  fping                            4.2-1
ii  isenkram-cli                     0.41
ii  ldap-utils                       2.4.47+dfsg-3
ii  ldapscripts                      2.0.8-1
ii  libconfig-inifiles-perl          3.000001-1
ii  libfilesys-df-perl               0.92-6+b4
ii  libhtml-fromtext-perl            2.07-1
ii  libio-socket-ssl-perl            2.060-3
ii  libnet-ldap-perl                 1:0.6500+dfsg-1
ii  libnet-netmask-perl              1.9104-1
ii  libnss3-tools                    2:3.42.1-1
ii  libpacparser1                    1.3.6-1.1+b4
ii  libpam-python                    1.0.6-1.1
ii  libproxy1-plugin-kconfig         0.4.15-5
ii  libproxy1-plugin-networkmanager  0.4.15-5
ii  libproxy1-plugin-webkit          0.4.15-5
ii  libterm-readkey-perl             2.38-1
ii  libtext-unaccent-perl            1.08-1.3+b3
ii  lockfile-progs                   0.1.18
ii  lsb-base                         10.2019031300
ii  lsb-release                      10.2019031300
ii  mime-support                     3.62
ii  net-tools                        1.60+git20180626.aebd88e-1
ii  netcat-traditional [netcat]      1.10-41.1
ii  ng-utils                         1.0-1+b1
ii  openssl                          1.1.1b-1
ii  patch                            2.7.6-3
ii  python                           2.7.16-1
ii  python-notify                    0.1.1-4
ii  ssl-cert                         1.0.39
ii  swaks                            20181104.0-2
ii  tftp-hpa                         5.2+20150808-1+b1
ii  uuid                             1.6.2-1.5+b7

Versions of packages debian-edu-config recommends:
ii  binutils       2.31.1-15
ii  libnotify-bin  0.7.7-4
ii  lsof           4.91+dfsg-1
ii  memtest86+     5.01-3
pn  resolvconf     <none>
ii  syslinux       3:6.04~git20190206.bf6db5b4+dfsg1-1

debian-edu-config suggests no packages.

- -- Configuration Files:
/etc/sssd/sssd-debian-edu.conf [Errno 13] Keine Berechtigung: '/etc/sssd/sssd-debian-edu.conf'

- -- debconf-show failed

-----BEGIN PGP SIGNATURE-----
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=ftWv
-----END PGP SIGNATURE-----

Bildschirmfoto_2019-05-10_15-07-32.png (69K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config: search domain not configured correctly on diskless workstations in subnet00

Wolfgang Schweer-3
On Fri, May 10, 2019 at 03:10:22PM +0200, Dominik George wrote:
>  1. Install a combined server like normal.
>  2. Add a machine on the LTSP network 192.168.0.0/32 as in the screenshot.

Thanks for providing the screenshot. It's a special case to have fixed
IPs in this subnet. If you untick DNS it is supposed to work.

Please test.

Wolfgang

signature.asc (981 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config: search domain not configured correctly on diskless workstations in subnet00

Dominik George-7
Hi,

> Thanks for providing the screenshot. It's a special case to have fixed
> IPs in this subnet. If you untick DNS it is supposed to work.

But then I don't get a resolvable, fixed hostname, right? That was the
whole idea behind adding the hosts: Have them limited to PXE booting,
but still get readable hostnames in logs and for SSH access.

I will still test without DNS.

-nik

signature.asc (919 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config | Hand out all subdomains configured by default to all LTSP clients. (ca3b521f)

Wolfgang Schweer-3
In reply to this post by Dominik George-7
On Fri, May 24, 2019 at 01:49:02PM +0000, Holger Levsen wrote:
> looks ok, though for getting it into Buster there should be a bug
> report, severity normal or wishlist..

IMO this change should be reconsidered.

The search-domain entry is missing in the LTSP client's /etc/resolv.conf
in this case (dedicated LTSP client network), because LTSP uses
'ipappend 3' in its PXE configuration.

Debian Edu uses 'ipappend 2' for the main network.

So if out of site specific wishes LTSP clients in their dedicated subnet
should be added via GOsa with also DNS enabled, 'ipappend 2' should be
used instead of 'ipappend 3'.

This can be set permanently by editing the default file
/opt/ltsp/<arch>/boot/pxelinux.cfg/ltsp-NBD and adjusting
/opt/ltsp/<arch>/etc/ltsp/update-kernels.conf (last line) and finally
running 'ltsp-update-kernels'.

Please check.

Wolfgang

signature.asc (981 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config | Hand out all subdomains configured by default to all LTSP clients. (ca3b521f)

Dominik George-7
>So if out of site specific wishes LTSP clients in their dedicated
>subnet
>should be added via GOsa with also DNS enabled, 'ipappend 2' should be
>used instead of 'ipappend 3'.

I strongly believe that every single host on a network should have a DNS record.

-nik

Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config | Hand out all subdomains configured by default to all LTSP clients. (ca3b521f)

Wolfgang Schweer-3
On Sat, May 25, 2019 at 03:02:16PM +0200, Dominik George wrote:
> >So if out of site specific wishes LTSP clients in their dedicated
> >subnet
> >should be added via GOsa with also DNS enabled, 'ipappend 2' should be
> >used instead of 'ipappend 3'.

> I strongly believe that every single host on a network should have a
> DNS record.

My mail wasn't about DNS record yes/no. It's about PXE configuration to
propagate DHCP settings properly in the dedicated LTSP network if a DNS
record is available.

Wolfgang

signature.asc (981 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config | Hand out all subdomains configured by default to all LTSP clients. (ca3b521f)

Dominik George-7
>My mail wasn't about DNS record yes/no.

Yes, it was, when you said that the wish for working DNS were site-specific :).

-nik

Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config | Hand out all subdomains configured by default to all LTSP clients. (ca3b521f)

Wolfgang Schweer-3
In reply to this post by Wolfgang Schweer-3
On Sat, May 25, 2019 at 02:26:22PM +0200, Wolfgang Schweer wrote:

> The search-domain entry is missing in the LTSP client's /etc/resolv.conf
> in this case (dedicated LTSP client network), because LTSP uses
> 'ipappend 3' in its PXE configuration.
>
> Debian Edu uses 'ipappend 2' for the main network.
>
> So if out of site specific wishes LTSP clients in their dedicated subnet
> should be added via GOsa with also DNS enabled, 'ipappend 2' should be
> used instead of 'ipappend 3'.
>
> This can be set permanently by editing the default file
> /opt/ltsp/<arch>/boot/pxelinux.cfg/ltsp-NBD and adjusting
> /opt/ltsp/<arch>/etc/ltsp/update-kernels.conf (last line) and finally
> running 'ltsp-update-kernels'.
Some more information:

LTSP switched to 'ipappend 3' as failsafe default during the Buster
development cycle, see this commit:
https://git.launchpad.net/ltsp/commit/?id=d4bd9546c05365c52bf210bfe715640df19ee95a 

For Debian Edu, the former 'ipappend 2' is more useful because a proper
DHCP service is available.

To get back to the previous behaviour, the setting needs to be adjusted
at LTSP chroot installation time. This change would do it:

diff --git a/share/ltsp/plugins/ltsp-build-client/Debian-custom/001-ltsp-settings b/share/ltsp/plugins/ltsp-build-client/Debian-custom/001-ltsp-settings
index 81946b3d..039ef6ac 100644
--- a/share/ltsp/plugins/ltsp-build-client/Debian-custom/001-ltsp-settings
+++ b/share/ltsp/plugins/ltsp-build-client/Debian-custom/001-ltsp-settings
@@ -18,4 +18,8 @@ case $MODE in
         echo 'APT::Cmdline::ignore-trust-violations "true";'
     ) >> $ROOT/etc/apt/apt.conf.d/90ltsp-build-client
   ;;
+    after-install)
+        mkdir -p $ROOT/etc/ltsp/update-kernels.conf.d
+        echo 'IPAPPEND="2"' > $ROOT/etc/ltsp/update-kernels.conf.d/pxe
+        ;;
 esac

Please check.

Wolfgang

signature.asc (981 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config: search domain not configured correctly on diskless workstations in subnet00

Wolfgang Schweer-3
In reply to this post by Dominik George-7
On Fri, May 10, 2019 at 03:10:22PM +0200, Dominik George wrote:

> The following misbehaviour occurs reproducibly in a new installation of
> Debian Edu buster.
>
>  1. Install a combined server like normal.
>  2. Add a machine on the LTSP network 192.168.0.0/32 as in the screenshot.
>  3. Boot that machine as diskless workstation.
>
> If done like that, the /etc/resolv.conf generated at boot by ltsp-init with
> the information provided by 08-edu-hostname is missing a search domain entry
> (it should probably be subnet00.intern intern).
The 08-edu-hostname script is unrelated to this issue, it's only
about Debian Edu compliant hostname setting.
 
> The configuration of the search domain works perfectly on the main network
> 10.0.0.0/16.

Yes, that's because the PXE configuration for the main 10.0.0.0/8 subnet
uses 'ipappend 2'; this option makes sure that all DHCP server
information gets through to the LTSP client.
 
LTSP switched to using 'ipappend 3' instead of 'ipappend 2' during the
Buster development cycle. While this option is useful for a simple LTSP
setup w/o a proper DHCP server, it prevents the DHCP server information
to get through to the client in the Debian Edu case.

For the dedicated LTSP subnets to show the same behaviour like the main
subnet, the related PXE option needs to be adjusted for the LTSP setup.

I've tested the following patch to work on a fresh installation using
the latest amd64 BD ISO image. (Replaced 001-ltsp-settings inside d-i
environment.) It works like expected.

diff --git
a/share/ltsp/plugins/ltsp-build-client/Debian-custom/001-ltsp-settings
+b/share/ltsp/plugins/ltsp-build-client/Debian-custom/001-ltsp-settings
index 81946b3d..039ef6ac 100644
---
a/share/ltsp/plugins/ltsp-build-client/Debian-custom/001-ltsp-settings
+++
b/share/ltsp/plugins/ltsp-build-client/Debian-custom/001-ltsp-settings
@@ -18,4 +18,8 @@ case $MODE in
         echo 'APT::Cmdline::ignore-trust-violations "true";'
     ) >> $ROOT/etc/apt/apt.conf.d/90ltsp-build-client
   ;;
+    after-install)
+        mkdir -p $ROOT/etc/ltsp/update-kernels.conf.d
+        echo 'IPAPPEND="2"' > $ROOT/etc/ltsp/update-kernels.conf.d/pxe
+        ;;
 esac

While at it, I've also tested the changed finish-install script (like
found in git) once again, works like expected (with haveged present).

Wolfgang

signature.asc (981 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config: search domain not configured correctly on diskless workstations in subnet00

Dominik George-7
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

I tested with the ipappend option, and it does indeed solve the major
problem. I would prefert o have all domains as search domains so every
host can be called by its short hostname, but that's a question of
taste, so I am fine with the ipappend solution. However…

> +    after-install)
> +        mkdir -p $ROOT/etc/ltsp/update-kernels.conf.d
> +        echo 'IPAPPEND="2"' > $ROOT/etc/ltsp/update-kernels.conf.d/pxe
> +        ;;

…I could not get ltsp-update-kernels to actually set ipappend to 2 in
the /var/lib/tftpboot/ltsp tree. I tried to put the IPAPPEND="2"
variable everywhere, but ltsp-update-kernels changed nothing and the
ltsp/ tree still had ipappend 3 everywhere.

So, two parts:

 * Using ipappend works toget working DNS
 * The update-kernels config for some reason does not work

Cheers,
Nik
-----BEGIN PGP SIGNATURE-----
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=7WSR
-----END PGP SIGNATURE-----

Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config: search domain not configured correctly on diskless workstations in subnet00

Wolfgang Schweer-3
On Wed, Jun 05, 2019 at 06:30:31PM +0200, Dominik George wrote:
> > +    after-install)
> > +        mkdir -p $ROOT/etc/ltsp/update-kernels.conf.d
> > +        echo 'IPAPPEND="2"' > $ROOT/etc/ltsp/update-kernels.conf.d/pxe
> > +        ;;
>
> …I could not get ltsp-update-kernels to actually set ipappend to 2 in
> the /var/lib/tftpboot/ltsp tree. I tried to put the IPAPPEND="2"
> variable everywhere, but ltsp-update-kernels changed nothing and the
> ltsp/ tree still had ipappend 3 everywhere.

The fix takes effect at LTSP chroot installation time.

You can test it on an existing LTSP server:

Replace
/usr/share/ltsp/plugins/ltsp-build-client/Debian-custom/001-ltsp-settings
with the file from the git repo.

Run 'ltsp-build-client' (after having moved away or deleted the existing
chroot); see 'ltsp-build-client --extra-help' for all possible options.

Wolfgang

signature.asc (981 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config: search domain not configured correctly on diskless workstations in subnet00

Dominik George-7
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

> The fix takes effect at LTSP chroot installation time.
>
> You can test it on an existing LTSP server:
>
> Replace
> /usr/share/ltsp/plugins/ltsp-build-client/Debian-custom/001-ltsp-settings
> with the file from the git repo.
>
> Run 'ltsp-build-client' (after having moved away or deleted the existing
> chroot); see 'ltsp-build-client --extra-help' for all possible options.

ok… I did run the command from the script in my existing chroot and
then ran ltsp-update-kernels. I was (and still am) very certain that
this is exactly what the script does.

I will test again using the script to generate the file.

- -nik
-----BEGIN PGP SIGNATURE-----

iQJlBAEBCgBPFiEEPJ1UpHV1wCb7F/0mt5o8FqDE8pYFAlz4AEsxGmh0dHBzOi8v
d3d3LmRvbWluaWstZ2VvcmdlLmRlL2dwZy1wb2xpY3kudHh0LmFzYwAKCRC3mjwW
oMTylutaD/0SYSmasPGe5TyDZR0n1N77ufpUzDw8O4sPHFTlbWoTrplFvrvxdgrT
HqzOIZg9P0VAcdLWTvG/wywW87L3E1cawedRLo4jL0oO1i5hhWQ3DhKwxmCNKimg
J1fR0aeqQs32OR+RHxmIm3TFq63igzbQkBhCZo6Fzmq4y0yfEocl4M31ExdD5rOd
GcScZM9/E+P9Z6Q7WBKEwCLbwVbiBKy1OHy3KWQ78Gwlf6JPaK87+2OcJ/7FXGBP
IiFbGRYhUaH1D6tgAHx8OFViru7VWRBDPflwSHaXR3e7cloJU6LdqsuJM7YAbwWh
BqOgppQ2rSnMi/lXX3YZp4CrfBDdTib7YZwNYVjrJYhKLQlRJ/bfgVPe6FcaxQz/
3pYgFuRFRfRp7pinPVZu2jklCrt3pmoJM4BarVwkQI5Zt8ifECOYsEZMairR/wQJ
0M676SBMF5mtXro8NsrnfXP7kxOAnK7qG48IuGKCbJN1YGbqSFcOcxiprr4fVSpS
/eS3I873usBwURJReO5tdzLaHT/JvdGNqFFtsV+P2iVJtpw/a1OcBCRTJswnCzMU
ggydbUXNTVuFixVzAJBwH5qzqiT6LUdVOyLETo7g28tsGuCffZcTI0O7WICDDb4T
Y/BvH9o+UAvu85m2BaVhpDPBtTCGg9lI0ydmokACwTG8JMykSdc13w==
=6sHV
-----END PGP SIGNATURE-----

Reply | Threaded
Open this post in threaded view
|

Bug#928756: debian-edu-config: search domain not configured correctly on diskless workstations in subnet00

Dominik George-7
In reply to this post by Wolfgang Schweer-3
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

> The fix takes effect at LTSP chroot installation time.
>
> You can test it on an existing LTSP server:
>
> Replace
> /usr/share/ltsp/plugins/ltsp-build-client/Debian-custom/001-ltsp-settings
> with the file from the git repo.
>
> Run 'ltsp-build-client' (after having moved away or deleted the existing
> chroot); see 'ltsp-build-client --extra-help' for all possible options.

It does indeed work when the config is placed there by
ltsp-build-client. I now wonder even more how and why
ltsp-update-kernels works, but ok ;).

- -nik
-----BEGIN PGP SIGNATURE-----
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=7AVD
-----END PGP SIGNATURE-----