[Bug 1565617] Re: "polkitd.service is masked" warnings on package install while policykit-1 is unpacked but not yet configured

[Martin Pitt]

Thinking about this some more, we don't actually want to query/use
polkit when calling systemctl from maintainer scripts. These always run
as root, and it's not expected at all that they (potentially) ask
interactively for authentication. So we can call systemctl with --no-
ask-password to disable querying of polkit which will not only avoid
these warnings, but also avoid triggering polkit at all, which
robustifies package installation as there are fewer moving parts.

This needs to be done in init-system-helpers as well as systemd's
package trigger.

** Patch added: "proposed init-system-helpers patch"
   https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1565617/+attachment/4622853/+files/0001-Call-systemctl-with-no-ask-password-to-avoid-queryin.patch

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1565617

Title:
  "polkitd.service is masked" warnings on package install while
  policykit-1 is unpacked but not yet configured

Status in init-system-helpers package in Ubuntu:
  Triaged
Status in systemd package in Ubuntu:
  Triaged

Bug description:
  Problem Description :
  =========================
  Error messages are seen while installing apport package.

  System details
  =============

  uname -a : 4.4.0-15-generic

  Machine : Power 8

  apport :
    Installed: 2.20-0ubuntu3
    Candidate: 2.20-0ubuntu3

  Steps to reproduce
  ============
  From a small xenial installation, like a cloud image:

  1. apt-get purge -y policykit-1 apport
  2. apt-get install apport

  Error
  ===

  root at powerkvm5:~# apt-get install apport
  Reading package lists... Done
  Building dependency tree
  Reading state information... Done
  The following additional packages will be installed:
    apport-symptoms policykit-1 python3-apport python3-problem-report python3-systemd
  Suggested packages:
    apport-gtk | apport-kde python3-launchpadlib
  The following NEW packages will be installed:
    apport apport-symptoms policykit-1 python3-apport python3-problem-report python3-systemd
  0 upgraded, 6 newly installed, 0 to remove and 0 not upgraded.
  Need to get 0 B/304 kB of archives.
  After this operation, 2,444 kB of additional disk space will be used.
  Do you want to continue? [Y/n] Y
  Selecting previously unselected package python3-problem-report.
  (Reading database ... 134848 files and directories currently installed.)
  Preparing to unpack .../python3-problem-report_2.20-0ubuntu3_all.deb ...
  Unpacking python3-problem-report (2.20-0ubuntu3) ...
  Selecting previously unselected package python3-apport.
  Preparing to unpack .../python3-apport_2.20-0ubuntu3_all.deb ...
  Unpacking python3-apport (2.20-0ubuntu3) ...
  Selecting previously unselected package apport.
  Preparing to unpack .../apport_2.20-0ubuntu3_all.deb ...
  Unpacking apport (2.20-0ubuntu3) ...
  Selecting previously unselected package apport-symptoms.
  Preparing to unpack .../apport-symptoms_0.20_all.deb ...
  Unpacking apport-symptoms (0.20) ...
  Selecting previously unselected package policykit-1.
  Preparing to unpack .../policykit-1_0.105-14.1_ppc64el.deb ...
  Created symlink from /run/systemd/system/polkitd.service to /dev/null.
  Unpacking policykit-1 (0.105-14.1) ...
  Selecting previously unselected package python3-systemd.
  Preparing to unpack .../python3-systemd_231-2build1_ppc64el.deb ...
  Unpacking python3-systemd (231-2build1) ...
  Processing triggers for systemd (229-3ubuntu1) ...
  Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: GDBus.Error:org.freedesktop.systemd1.UnitMasked: Unit polkitd.service is masked. (g-io-error-quark, 36)
  Processing triggers for ureadahead (0.100.0-19) ...
  Processing triggers for shared-mime-info (1.5-2) ...
  Processing triggers for hicolor-icon-theme (0.15-0ubuntu1) ...
  Processing triggers for man-db (2.7.5-1) ...
  Processing triggers for dbus (1.10.6-1ubuntu2) ...
  Setting up python3-problem-report (2.20-0ubuntu3) ...
  Setting up python3-apport (2.20-0ubuntu3) ...
  Setting up apport (2.20-0ubuntu3) ...
  Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: GDBus.Error:org.freedesktop.systemd1.UnitMasked: Unit polkitd.service is masked. (g-io-error-quark, 36)
  Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: GDBus.Error:org.freedesktop.systemd1.UnitMasked: Unit polkitd.service is masked. (g-io-error-quark, 36)
  Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: GDBus.Error:org.freedesktop.systemd1.UnitMasked: Unit polkitd.service is masked. (g-io-error-quark, 36)
  Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: GDBus.Error:org.freedesktop.systemd1.UnitMasked: Unit polkitd.service is masked. (g-io-error-quark, 36)
  Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: GDBus.Error:org.freedesktop.systemd1.UnitMasked: Unit polkitd.service is masked. (g-io-error-quark, 36)
  Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: GDBus.Error:org.freedesktop.systemd1.UnitMasked: Unit polkitd.service is masked. (g-io-error-quark, 36)
  Setting up apport-symptoms (0.20) ...
  Setting up policykit-1 (0.105-14.1) ...
  Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: GDBus.Error:org.freedesktop.systemd1.UnitMasked: Unit polkitd.service is masked. (g-io-error-quark, 36)
  Removed symlink /run/systemd/system/polkitd.service.
  PolicyKit daemon disconnected from the bus.
  We are no longer a registered authentication agent.
  PolicyKit daemon reconnected to bus.
  Attempting to re-register as an authentication agent.
  We are now a registered authentication agent.
  Setting up python3-systemd (231-2build1) ...
  Processing triggers for dbus (1.10.6-1ubuntu2) ...

  Analysis
  =====

  The fix has been included for Ubuntu Vivid, need to be forward ported
  for Ubuntu Xenial

  https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/1447654

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/init-system-helpers/+bug/1565617/+subscriptions