[Bug 1943049] Re: Docker ubuntu:impish: Problem executing scripts DPkg::Post-Invoke 'rm -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb /var/cache/apt/*.bin || true'

[Lucas Kanashiro]

Hi Thomas,

Thanks for all the testing. The version you are using does not contain
the fix, if you check the changelog of version 20.10.7-0ubuntu1~21.04.2
you will see that this is a security fixes (coming from the security
pocket). This happened because an important CVE came up and we needed to
fix it ASAP, I did apply the fix of this bug on top of this security fix
but it is still waiting for the SRU team. For more info on the
backporting check out this bug:

https://bugs.launchpad.net/ubuntu/+source/runc/+bug/1938908

In Hirsute, this is the version we need to land to fix this bug:

https://launchpad.net/ubuntu/+source/docker.io/20.10.7-0ubuntu4~21.04.1

You can also keep an eye on this page for more info about SRUs:

https://people.canonical.com/~ubuntu-archive/pending-sru.html

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to glibc in Ubuntu.
https://bugs.launchpad.net/bugs/1943049

Title:
  Docker ubuntu:impish: Problem executing scripts DPkg::Post-Invoke 'rm
  -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb
  /var/cache/apt/*.bin || true'

Status in cloud-images:
  Confirmed
Status in containerd package in Ubuntu:
  New
Status in crun package in Ubuntu:
  Confirmed
Status in docker.io package in Ubuntu:
  Fix Released
Status in glibc package in Ubuntu:
  Confirmed
Status in golang-github-containers-common package in Ubuntu:
  Fix Released
Status in golang-github-opencontainers-specs package in Ubuntu:
  Fix Released
Status in libpod package in Ubuntu:
  Fix Released
Status in runc package in Ubuntu:
  Invalid
Status in containerd source package in Focal:
  Fix Committed
Status in docker.io source package in Focal:
  Fix Committed
Status in docker.io source package in Hirsute:
  Fix Committed
Status in containerd source package in Impish:
  New
Status in crun source package in Impish:
  Confirmed
Status in docker.io source package in Impish:
  Fix Released
Status in glibc source package in Impish:
  Confirmed
Status in golang-github-containers-common source package in Impish:
  Fix Released
Status in golang-github-opencontainers-specs source package in Impish:
  Fix Released
Status in libpod source package in Impish:
  Fix Released
Status in runc source package in Impish:
  Invalid

Bug description:
  Sometime betweek August 28 and September 4 2021 the ubuntu:impish
  images published on dockerhub began erroring when executing the
  commands defined in /etc/apt/apt.conf.d/docker-clean.

  I have this reproducer, which is probably not as minimal as it can be
  but looks reliable:

  1. docker run -it --rm ubuntu:impish bash
  2. apt update
  3. apt install git
  4. apt -y remove git

  This results in:

  E: Problem executing scripts DPkg::Post-Invoke 'rm -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb /var/cache/apt/*.bin || true'
  E: Sub-process returned an error code

  *Removing* a package is not strictly needed to trigger the failure,
  but it seems that *two* apt operations are needed to trigger it, so
  this reproducer found by athos-ribeiro also works:

  docker run -it --rm ubuntu:impish /bin/bash -c 'apt-get update; apt-
  get full-upgrade -y; apt-get install -y jq'

  This doesn't happen when using ubuntu:hirsute.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-images/+bug/1943049/+subscriptions