Zentyal locks during boot

[ppardo]

Hi All,
since this morning, zentyal is completely lock during plymouthd process.

Here's end of boot.log (after waiting 55 minutes)

Code: [Select]

.....
[  OK  ] Started ISC DHCP IPv4 server.
[  OK  ] Started BIND Domain Name Server.
[  OK  ] Reached target Host and Network Name Lookups.
         Starting Cleanup of Temporary Directories...
[  OK  ] Started Cleanup of Temporary Directories.
[  *** ] (1 of 2) A start job is running for Zentyal start/stop task (55min 58s / no limit)

I try some commands
zs dns status
=> [STOPPED]
But I cannot restart dns
zs dns start=> this never ends

Here's the end of zentyal.log :

Code: [Select]


2017/03/20 13:03:09 INFO> Init.pm:85 EBox::Util::Init::start - Modules to start: network firewall antivirus audit ca dhcp dns logs ntp samba mail mailfilter sogo webadmin
2017/03/20 13:03:09 INFO> Service.pm:958 EBox::Module::Service::restartService - Restarting service for module: network
2017/03/20 13:03:12 INFO> Service.pm:958 EBox::Module::Service::restartService - Restarting service for module: firewall
2017/03/20 13:03:12 INFO> Service.pm:958 EBox::Module::Service::restartService - Restarting service for module: antivirus
2017/03/20 13:03:12 INFO> Service.pm:958 EBox::Module::Service::restartService - Restarting service for module: audit
2017/03/20 13:03:12 INFO> Service.pm:958 EBox::Module::Service::restartService - Restarting service for module: ca
2017/03/20 13:03:13 INFO> Service.pm:958 EBox::Module::Service::restartService - Restarting service for module: dhcp
2017/03/20 13:03:13 INFO> Service.pm:958 EBox::Module::Service::restartService - Restarting service for module: dns
2017/03/20 13:03:14 INFO> DNS.pm:91 EBox::DNS::appArmorProfiles - Setting DNS apparmor profile

DNS problem, Apparmor problem ?
Any idea will be welcome

Thx

[ppardo]

Hi,
here's a simple way to reproduce problem

• do a fresh install
• select module to install
• let zentyal apply updates
• reboot
• ...

never ends !!!

[Belackriv]

Just chiming in to say I'm having the same issue. 

[rubic]

It was apparmor in my case. Try add the following to /usr/share/zentyal/stubs/dns/apparmor-named.local.mas:

Code: [Select]

/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/** rm,
also alter 'Access to kerberos keytab' to '/var/lib/samba/private/dns.keytab rk,'.

There are other modules namely, mysqld ejabberdctl, complaining at boot time.
For mysqld add the following to /usr/share/zentyal/stubs/dns/apparmor-mysqld.local.mas:

Code: [Select]

/sys/devices/system/node/** r,
@{PROC}/@{pid}/status r,

For ejabberdctl:

Code: [Select]

profile su {
/run/samba/winbindd/pipe rw,
}

to /etc/apparmor.d/local/usr.sbin.ejabberdctl

[ppardo]

Thanks for reply,
It's not possible for me to test your reply (I've reinstalled everything  ).

But I think you find the problem.

I identify that apparmor may be the cause, but hard to find a fix.

Thanks
Best regards

[Belackriv]

Much obliged rubic, worked like a charm!

[TRothlis]

Another thanks to rubic. Worked for me too.

[chris.holmes]

Same issue for me, but it starts complaining at BIND and this fix didn't work. I know this is an old dead topic but I'm dead in the water right now.
Rolling back the server to this morning didn't work.

<UPDATE> I had to roll the server WAY back to get it working again. I'm going to have to redo my system.