package openssh-server 1:9.0p1-1ubuntu7 failed to install/upgrade: postinstall script returned 1
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
openssh (Ubuntu) |
Fix Released
|
Critical
|
Nick Rosbrook | ||
Kinetic |
Fix Released
|
Critical
|
Unassigned |
Bug Description
[Impact]
Users with /etc/ssh/
[Test Plan]
There are 4 tests that should be used to verify the fix:
1. Upgrade to Kinetic with just one ListenAddress entry, which specifies port number.
* On a Jammy system, edit /etc/ssh/
[...defaults everywhere else...]
#Port 22
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::
ListenAddress 0.0.0.0:1234
[...defaults everywhere else...]
* Run `systemctl restart ssh.service` and confirm that the new configuration works as expected.
* Before running the upgrade, make sure -proposed is enabled.
* Upgrade to Kinetic by changing jammy -> kinetic in /etc/apt/
* On an affected system, ssh.socket will fail with `bad-setting` because /etc/systemd/
[Socket]
ListenStream=
* On a patched system, ssh.socket will be active/listening, and /etc/systemd/
[Socket]
ListenStream=
ListenStream=
2. Upgrade to Kinetic with multiple ListenAddress entries, each specifying port number.
* On a Jammy system, edit /etc/ssh/
[...defaults everywhere else...]
#Port 22
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::
ListenAddress 0.0.0.0:1234
ListenAddress [::]:4321
[...defaults everywhere else...]
* Run `systemctl restart ssh.service` and confirm that the new configuration works as expected.
* Before running the upgrade, make sure -proposed is enabled.
* Upgrade to Kinetic by changing jammy -> kinetic in /etc/apt/
* On an affected system, migration will be attempted despite the multiple ListenAddress options, and ssh.socket will fail with `bad-setting` because /etc/systemd/
[Socket]
ListenStream=
* On a patched system, the ListenAddress option will be parsed correctly, and migration will not be attempted.
3. On a Kinetic system which was migrated, but with errors (e.g. test case #1, prior to being patched), installing the new package should correct the ssh.socket configuration.
* On a Jammy system, edit /etc/ssh/
[...defaults everywhere else...]
#Port 22
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::
ListenAddress 0.0.0.0:1234
[...defaults everywhere else...]
* Run `systemctl restart ssh.service` and confirm that the new configuration works as expected.
* Do NOT enable -proposed before the upgrade.
* Run `do-release-
* After the openssh-server configuration fails, enable -proposed, and upgrade openssh-server.
* The ssh.socket configuration should be fixed, and /etc/systemd/
[Socket]
ListenStream=
ListenStream=
4. On a Kinetic system which was incorrectly migrated to ssh socket activation (e.g. test case #2, prior to being patched), installing the new package reverts to the previous behavior.
* On a Jammy system, edit /etc/ssh/
[...defaults everywhere else...]
#Port 22
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::
ListenAddress 0.0.0.0:1234
ListenAddress [::]:4321
[...defaults everywhere else...]
* Run `systemctl restart ssh.service` and confirm that the new configuration works as expected.
* Do NOT enable -proposed before the upgrade.
* Run `do-release-
* After the openssh-server configuration fails, enable -proposed, and upgrade openssh-server.
* The socket-activated ssh migration should be reverted, and ssh.service should be running as before upgrade to Kinetic.
[Where problems could occur]
These changes are in the openssh-
[Original Description]
update failed...
ProblemType: Package
DistroRelease: Ubuntu 22.10
Package: openssh-server 1:9.0p1-1ubuntu7
ProcVersionSign
Uname: Linux 5.15.0-48-generic x86_64
NonfreeKernelMo
ApportVersion: 2.23.1-0ubuntu3
Architecture: amd64
CasperMD5CheckR
Date: Wed Oct 19 08:41:28 2022
ErrorMessage: »installiertes post-installati
InstallationDate: Installed on 2019-08-13 (1162 days ago)
InstallationMedia: Ubuntu-Server 18.04.2 LTS "Bionic Beaver" - Release amd64 (20190210)
Python3Details: /usr/bin/
PythonDetails: N/A
RebootRequiredPkgs: Error: path contained symlinks.
RelatedPackageV
dpkg 1.21.9ubuntu1
apt 2.5.3
SourcePackage: openssh
Title: package openssh-server 1:9.0p1-1ubuntu7 failed to install/upgrade: »installiertes post-installati
UpgradeStatus: Upgraded to kinetic on 2022-10-19 (0 days ago)
Changed in openssh (Ubuntu): | |
status: | Incomplete → Triaged |
tags: | added: fr-2890 |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
Changed in openssh (Ubuntu): | |
assignee: | nobody → Nick Rosbrook (enr0n) |
Changed in openssh (Ubuntu): | |
status: | Triaged → In Progress |
status: | In Progress → Fix Committed |
Changed in openssh (Ubuntu): | |
status: | Fix Committed → Fix Released |
Changed in openssh (Ubuntu): | |
status: | Fix Released → Fix Committed |
tags: | removed: foundations-todo |
sshdconfig.txt actually does NOT contain a line with Port 22 (it is commented out)
the beginning of the file is:
Include /etc/ssh/ sshd_config. d/*.conf
#Port 22 8387:80: 3897:7aff: fe15:4de6] :22
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::
ListenAddress [fd12:2017:
ListenAddress [::]:15902
ListenAddress 0.0.0.0:15902