Package OpenNTPd does not install

[Lars Noodén]

Binary package hint: openntpd

Bug #548602 says to open a new report if there are any issues.

OpenNTPd does not install using apt-get, it instead gives an error message and the installation fails:

 Setting up openntpd (3.9p1+debian-8) ...
 Starting openntpd: /etc/openntpd/ntpd.conf: Permission denied
 invoke-rc.d: initscript openntpd, action "start" failed.
 dpkg: error processing openntpd (--configure):
  subprocess installed post-installation script returned error exit status 1
 Errors were encountered while processing:
  openntpd
 E: Sub-process /usr/bin/dpkg returned an error code (1)

$ apt-cache policy openntpd
openntpd:
  Installed: 3.9p1+debian-8
  Candidate: 3.9p1+debian-8
  Version table:
 *** 3.9p1+debian-8 0
        500 http://fi.archive.ubuntu.com/ubuntu/ natty/universe amd64 Packages
        100 /var/lib/dpkg/status

[Lars Noodén (larsnooden)]

It appears to install and run correctly in 11.10 Oneiric

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Lars Noodén (larsnooden)]

The problem seems to have gone away for Ubuntu 11.10

[Miika Turkia (miika-turkia)]

I am/was experiencing this problem on Ubuntu 11.10. A bit of tuning for apparmor's confiugration solved the problem for me. Editing /etc/apparmor.d/usr.sbin.ntpd and running 'sudo dpkg-reconfigure apparmor' did the trick. I added the following two lines for the /usr/sbin/ntpd:
  /etc/openntpd/ntpd.conf r,
  /{,var/}run/openntpd.pid w,

The trouble was that the apparmor prevented ntpd from reading the configuration file and then prevented writing of the pid file...

[Alexander (lxandr)]

problem also exists in 12.04

# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu precise (development branch)
Release: 12.04
Codename: precise

# apt-cache policy apparmor openntpd
apparmor:
  Установлен: 2.7.102-0ubuntu1
  Кандидат: 2.7.102-0ubuntu3
  Таблица версий:
     2.7.102-0ubuntu3 0
        500 http://ua.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
 *** 2.7.102-0ubuntu1 0
        100 /var/lib/dpkg/status
openntpd:
  Установлен: 3.9p1+debian-9
  Кандидат: 3.9p1+debian-9
  Таблица версий:
 *** 3.9p1+debian-9 0
        500 http://ua.archive.ubuntu.com/ubuntu/ precise/universe amd64 Packages
        100 /var/lib/dpkg/status

[Alexander (lxandr)]

BTW, Miika's method doesn't do the trick. Now I have this:

Настраивается пакет openntpd (3.9p1+debian-9) ...
Starting openntpd: /usr/sbin/ntpd: error while loading shared libraries: libcrypto.so.1.0.0: cannot open shared object file: No such file or directory
invoke-rc.d: initscript openntpd, action "start" failed.
dpkg: не удалось обработать параметр openntpd (--configure):
 подпроцесс установлен сценарий post-installation возвратил код ошибки 127
Отчёты apport не записаны, так достигнут MaxReports
                                                   При обработке следующих пакетов произошли ошибки:
 openntpd
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install. Trying to recover:
Настраивается пакет openntpd (3.9p1+debian-9) ...
Starting openntpd: /usr/sbin/ntpd: error while loading shared libraries: libcrypto.so.1.0.0: cannot open shared object file: No such file or directory
invoke-rc.d: initscript openntpd, action "start" failed.
dpkg: не удалось обработать параметр openntpd (--configure):
 подпроцесс установлен сценарий post-installation возвратил код ошибки 127
При обработке следующих пакетов произошли ошибки:
 openntpd
Press return to continue.

Looks like that adding some more rules to apparmor needed.

[Peter Matulis (petermatulis)]

Workaround in comment #4 worked for me this evening on 12.04 (beta-2).

[Paul Boven (p-boven)]

Bug still exists in Raring (13.04)

[Lars Noodén (larsnooden)]

Bug still existis in Saucy alpha

[Mrten (bugzilla-ii)]

This isn't really a bug in the openntpd package, it's a result of the fact that the 'ntp' package and the 'openntpd' package use the same filename for the daemon. I'm willing to bet that each and every one of you here first had 'ntp' installed and then upgraded to 'openntpd'.

'ntp' leaved an apparmor profile behind, and that isn't tuned for openntpd.

So the solution here is to first (!) run 'apparmor_parser -R /etc/apparmor.d/usr.sbin.ntpd' and then 'apt-get purge ntp'.

If you try to do it the other way around the usr.sbin.ntpd profile is gone and you have to place a dummy profile in its place, apparmor_parser -R needs a file, even if it's almost emtpy.

A file with

/usr/sbin/ntpd {
}

in it will do.

[Paweł Hikiert (nsilent22)]

Mrten is right. Uninstallation of ntp leaves its apparmor profile config file. You have to purge it, and then openntpd installs cleanly.

[Ulises Vitulli (dererk-debian-org)]

This is due to unclean installation from ntp package, not openntpd. Closing this as invalid.