For some reason provisioning the Thumbor role (on Jessie at least) results in addgroup failing from that point on:
vagrant@mediawiki-vagrant:~$ sudo groupadd snackbar groupadd: failure while writing changes to /etc/group
It doesn't seem to be caused by any of the other roles the thumbor one requires.
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| [WIP] Make Thumbor role upgrade linux kernel | mediawiki/vagrant | master | +34 -0 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | • Gilles | T156826 Thumbor role breaks /etc/group | |||
| Resolved | • Gilles | T161610 Apt::pin now causes circular dependency on Swift and Thumbor vagrant roles | |||
| Resolved | bd808 | T161707 Upgrade linux kernel used on Vagrant to 4+ | |||
| Resolved | • Gilles | T183462 Fix Thumbor role for Stretch | |||
| Resolved | • Gilles | T183384 Fix Poolcounter role for Stretch | |||
| Resolved | fgiunchedi | T183385 Package Poolcounter for Debian Stretch |
I've removed the superfluous creation attempt of the thumbor group and user from the role, which are created by the Debian package, but it hasn't helped.
stracing what groupadd does, it seems to be:
rename("/etc/group+", "/etc/group") = -1 EBUSY (Device or resource busy)Indeed, trying to do that manually fails:
vagrant@mediawiki-vagrant:~$ sudo mv /etc/group+ /etc/group mv: cannot move ‘/etc/group+’ to ‘/etc/group’: Device or resource busy
Sigh... found the answer, it's firejail affecting things outside of what it jails on "older" kernels: https://github.com/netblue30/firejail/issues/270
Change 345584 had a related patch set uploaded (by Gilles):
[mediawiki/vagrant@master] [WIP] Make Thumbor role upgrade linux kernel