Rawhide users: don't update to 20201208.n.0 packages (likely glibc), console login and su are broken

[Adam Williamson]

Hey folks!

Just a heads up that the most recent Rawhide compose (20201208.n.0)
seems badly broken; console login doesn't work and 'su' segfaults. I
think the most likely cause of these issues is the new glibc 2.32.9000-
19.fc34 build.

So if you're running Rawhide I'd recommend holding off on updating, and
especially on updating glibc, if you didn't do it already. If you've
updated glibc you may want to downgrade it (if you still have a root
shell somewhere :>)
-- 
Adam Williamson
Fedora QA
IRC: adamw | Twitter: adamw_ha
https://www.happyassassin.net

[Adam Williamson]

On Wed, 2020-12-09 at 10:34 -0800, Adam Williamson wrote:
>  Hey folks!
>  
>  Just a heads up that the most recent Rawhide compose (20201208.n.0)
>  seems badly broken; console login doesn't work and 'su' segfaults. I
>  think the most likely cause of these issues is the new glibc 2.32.9000-
>  19.fc34 build.
>  
>  So if you're running Rawhide I'd recommend holding off on updating, and
>  especially on updating glibc, if you didn't do it already. If you've
>  updated glibc you may want to downgrade it (if you still have a root
>  shell somewhere :>) 
Still looking into this, but it seems kinda complex. Downgrading glibc
on my test VM didn't fix the issues. I thought sssd might be the
culprit, but downgrading that didn't help either.

It seems like the console login bug at least doesn't happen with a
minimal package install:
https://openqa.fedoraproject.org/tests/737305
passed, including console login as user and root, and I verified that
it used the packages from the 1208.n.0 compose. But it seems to
reliably happen on Server, Workstation and KDE installs. So it's
apparently caused by something present in those installs but not in
minimal...

Still looking into this, my advice for now is still not to upgrade past
the 1207.n.0 package state until it's figured out :)
-- 
Adam Williamson
Fedora QA
IRC: adamw | Twitter: adamw_ha
https://www.happyassassin.net

Rawhide users: don't update to 20201208.n.0 packages (fprintd 1.90.6), console login and su are broken

[Adam Williamson]

On Wed, 2020-12-09 at 12:02 -0800, Adam Williamson wrote:
>  On Wed, 2020-12-09 at 10:34 -0800, Adam Williamson wrote:
>  > Hey folks!
>  > 
>  > Just a heads up that the most recent Rawhide compose (20201208.n.0)
>  > seems badly broken; console login doesn't work and 'su' segfaults. I
>  > think the most likely cause of these issues is the new glibc 2.32.9000-
>  > 19.fc34 build.
>  > 
>  > So if you're running Rawhide I'd recommend holding off on updating, and
>  > especially on updating glibc, if you didn't do it already. If you've
>  > updated glibc you may want to downgrade it (if you still have a root
>  > shell somewhere :>)
>  
>  Still looking into this, but it seems kinda complex. Downgrading glibc
>  on my test VM didn't fix the issues. I thought sssd might be the
>  culprit, but downgrading that didn't help either.
>  
>  It seems like the console login bug at least doesn't happen with a
>  minimal package install:
>  https://openqa.fedoraproject.org/tests/737305
>  passed, including console login as user and root, and I verified that
>  it used the packages from the 1208.n.0 compose. But it seems to
>  reliably happen on Server, Workstation and KDE installs. So it's
>  apparently caused by something present in those installs but not in
>  minimal...
>  
>  Still looking into this, my advice for now is still not to upgrade past
>  the 1207.n.0 package state until it's figured out :) 
OK, further update: culprit seems to be fprintd. fprintd 1.90.6 is the
bad version. A 1.90.7 build is done which should fix it:

https://koji.fedoraproject.org/koji/buildinfo?buildID=1656747

A libfprint 1.90.6 is also done, not sure if that's also needed:

https://koji.fedoraproject.org/koji/buildinfo?buildID=1656771

There were bug reports already that I hadn't found as I was looking for
glibc bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1905667
https://bugzilla.redhat.com/show_bug.cgi?id=1905964

so, skip fprintd 1.90.6!
-- 
Adam Williamson
Fedora QA
IRC: adamw | Twitter: adamw_ha
https://www.happyassassin.net

Rawhide users: don't update to 20201208.n.0 packages (fprintd 1.90.6), console login and su are broken

[Kevin Fenzi]

On Wed, Dec 09, 2020 at 12:53:05PM -0800, Adam Williamson wrote:
...snip...
>  
>  There were bug reports already that I hadn't found as I was looking for
>  glibc bugs:
>  
>  https://bugzilla.redhat.com/show_bug.cgi?id=1905667
>  https://bugzilla.redhat.com/show_bug.cgi?id=1905964
>  
>  so, skip fprintd 1.90.6! 
There's a fixed fprintd now, however glibc still does have a bug where
it doesn't give you your secondary groups on login. This makes it hard
to use 'sudo' if you depend on being in the 'wheel' group. 

A fix is being worked on, but in the mean time as a workaround you can
use 'newgrp wheel' and then sudo. 

kevin

Rawhide users: don't update to 20201208.n.0 packages (fprintd 1.90.6), console login and su are broken

[Florian Weimer]

* Kevin Fenzi:

>  On Wed, Dec 09, 2020 at 12:53:05PM -0800, Adam Williamson wrote:
>  ...snip...
> > 
> > There were bug reports already that I hadn't found as I was looking for
> > glibc bugs:
> > 
> > https://bugzilla.redhat.com/show_bug.cgi?id=1905667
> > https://bugzilla.redhat.com/show_bug.cgi?id=1905964
> > 
> > so, skip fprintd 1.90.6!
>
>  There's a fixed fprintd now, however glibc still does have a bug where
>  it doesn't give you your secondary groups on login. This makes it hard
>  to use 'sudo' if you depend on being in the 'wheel' group. 
>
>  A fix is being worked on, but in the mean time as a workaround you can
>  use 'newgrp wheel' and then sudo. 
glibc-2.32.9000-20.fc34 should have the fix.  Sorry for the interruption
of service.

Thanks,
Florian
-- 
Red Hat GmbH, https://de.redhat.com/ , Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Brian Klemm, Laurie Krebs, Michael O'Neill

[Luya Tshimbalanga]

For users already who have already installed libfprint 1.90.6 on Rawhide and faced su
issues, simply upgrade with pkcon with the following PackageiKit commmand:

pkcon update fprintd

No need for sudo as long the main repository is trusted.