[Bug 2067927] Re: systemd ships nice.conf override for wrong service

[Nick Rosbrook]

I have verified the fix using systemd 255.4-1ubuntu8.2 from noble-
proposed:

nr at zero:~$ lxc launch ubuntu-daily:n n
Creating n
Starting n                                    
nr at zero:~$ lxc exec n bash     
root at n:~# vim /etc/apt/sources.list.d/ubuntu.sources 
root at n:~# apt update && apt install -t noble-proposed systemd
Get:1 http://security.ubuntu.com/ubuntu noble-security InRelease [126 kB]
Hit:2 http://archive.ubuntu.com/ubuntu noble InRelease                                 
Get:3 http://security.ubuntu.com/ubuntu noble-security/main amd64 Packages [199 kB]
Get:4 http://archive.ubuntu.com/ubuntu noble-updates InRelease [126 kB]
Get:5 http://security.ubuntu.com/ubuntu noble-security/main Translation-en [50.7 kB]
Get:6 http://security.ubuntu.com/ubuntu noble-security/main amd64 c-n-f Metadata [2432 B]        
Get:7 http://security.ubuntu.com/ubuntu noble-security/universe amd64 Packages [67.4 kB]         
Get:8 http://security.ubuntu.com/ubuntu noble-security/universe Translation-en [23.9 kB]         
Get:9 http://security.ubuntu.com/ubuntu noble-security/universe amd64 Components [8632 B]        
Get:10 http://security.ubuntu.com/ubuntu noble-security/universe amd64 c-n-f Metadata [2236 B]   
Get:11 http://security.ubuntu.com/ubuntu noble-security/restricted amd64 Packages [145 kB]  
Get:12 http://security.ubuntu.com/ubuntu noble-security/restricted Translation-en [27.8 kB]     
Get:13 http://security.ubuntu.com/ubuntu noble-security/restricted amd64 c-n-f Metadata [420 B]       
Get:14 http://security.ubuntu.com/ubuntu noble-security/multiverse amd64 Packages [10.6 kB]           
Get:15 http://security.ubuntu.com/ubuntu noble-security/multiverse Translation-en [2808 B]            
Get:16 http://security.ubuntu.com/ubuntu noble-security/multiverse amd64 Components [208 B]
Get:17 http://security.ubuntu.com/ubuntu noble-security/multiverse amd64 c-n-f Metadata [344 B]
Get:18 http://archive.ubuntu.com/ubuntu noble-backports InRelease [126 kB]               
Get:19 http://archive.ubuntu.com/ubuntu noble-proposed InRelease [265 kB]
Get:20 http://archive.ubuntu.com/ubuntu noble/universe amd64 Packages [15.0 MB]
Get:21 http://archive.ubuntu.com/ubuntu noble/universe Translation-en [5982 kB]
Get:22 http://archive.ubuntu.com/ubuntu noble/universe amd64 Components [3871 kB]
Get:23 http://archive.ubuntu.com/ubuntu noble/universe amd64 c-n-f Metadata [301 kB]
Get:24 http://archive.ubuntu.com/ubuntu noble/multiverse amd64 Packages [269 kB]
Get:25 http://archive.ubuntu.com/ubuntu noble/multiverse Translation-en [118 kB]
Get:26 http://archive.ubuntu.com/ubuntu noble/multiverse amd64 Components [35.0 kB]
Get:27 http://archive.ubuntu.com/ubuntu noble/multiverse amd64 c-n-f Metadata [8328 B]
Get:28 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages [226 kB]
Get:29 http://archive.ubuntu.com/ubuntu noble-updates/main Translation-en [61.2 kB]
Get:30 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 c-n-f Metadata [3596 B]
Get:31 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 Packages [118 kB]
Get:32 http://archive.ubuntu.com/ubuntu noble-updates/universe Translation-en [43.8 kB]
Get:33 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 Components [45.0 kB]
Get:34 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 c-n-f Metadata [4752 B]
Get:35 http://archive.ubuntu.com/ubuntu noble-updates/restricted amd64 Packages [145 kB]
Get:36 http://archive.ubuntu.com/ubuntu noble-updates/restricted Translation-en [27.8 kB]
Get:37 http://archive.ubuntu.com/ubuntu noble-updates/restricted amd64 c-n-f Metadata [416 B]
Get:38 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 Packages [14.1 kB]
Get:39 http://archive.ubuntu.com/ubuntu noble-updates/multiverse Translation-en [3608 B]
Get:40 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 Components [212 B]
Get:41 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 c-n-f Metadata [532 B]
Get:42 http://archive.ubuntu.com/ubuntu noble-backports/main amd64 Components [208 B]
Get:43 http://archive.ubuntu.com/ubuntu noble-backports/main amd64 c-n-f Metadata [112 B]
Get:44 http://archive.ubuntu.com/ubuntu noble-backports/universe amd64 Packages [8696 B]
Get:45 http://archive.ubuntu.com/ubuntu noble-backports/universe Translation-en [10.0 kB]
Get:46 http://archive.ubuntu.com/ubuntu noble-backports/universe amd64 Components [17.6 kB]
Get:47 http://archive.ubuntu.com/ubuntu noble-backports/universe amd64 c-n-f Metadata [988 B]
Get:48 http://archive.ubuntu.com/ubuntu noble-backports/restricted amd64 Components [216 B]
Get:49 http://archive.ubuntu.com/ubuntu noble-backports/restricted amd64 c-n-f Metadata [116 B]
Get:50 http://archive.ubuntu.com/ubuntu noble-backports/multiverse amd64 Components [212 B]
Get:51 http://archive.ubuntu.com/ubuntu noble-backports/multiverse amd64 c-n-f Metadata [116 B]
Get:52 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 Packages [107 kB]
Get:53 http://archive.ubuntu.com/ubuntu noble-proposed/main Translation-en [28.3 kB]
Get:54 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 Components [44.1 kB]
Get:55 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 c-n-f Metadata [1380 B]
Get:56 http://archive.ubuntu.com/ubuntu noble-proposed/universe amd64 Packages [41.9 kB]
Get:57 http://archive.ubuntu.com/ubuntu noble-proposed/universe Translation-en [22.2 kB]
Get:58 http://archive.ubuntu.com/ubuntu noble-proposed/universe amd64 Components [42.4 kB]
Get:59 http://archive.ubuntu.com/ubuntu noble-proposed/universe amd64 c-n-f Metadata [1344 B]
Get:60 http://archive.ubuntu.com/ubuntu noble-proposed/restricted amd64 Packages [90.6 kB]
Get:61 http://archive.ubuntu.com/ubuntu noble-proposed/restricted Translation-en [19.2 kB]
Get:62 http://archive.ubuntu.com/ubuntu noble-proposed/restricted amd64 Components [212 B]
Get:63 http://archive.ubuntu.com/ubuntu noble-proposed/restricted amd64 c-n-f Metadata [116 B]
Get:64 http://archive.ubuntu.com/ubuntu noble-proposed/multiverse amd64 Components [940 B]
Get:65 http://archive.ubuntu.com/ubuntu noble-proposed/multiverse amd64 c-n-f Metadata [116 B]
Fetched 27.9 MB in 6s (4552 kB/s)                                                                                                                                                                                                             
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
  libnss-systemd libpam-systemd libsystemd-shared libsystemd0 libudev1 systemd-dev systemd-resolved systemd-sysv systemd-timesyncd udev
Suggested packages:
  systemd-container systemd-homed systemd-userdbd systemd-boot libqrencode4 libtss2-rc0
The following packages will be upgraded:
  libnss-systemd libpam-systemd libsystemd-shared libsystemd0 libudev1 systemd systemd-dev systemd-resolved systemd-sysv systemd-timesyncd udev
11 upgraded, 0 newly installed, 0 to remove and 15 not upgraded.
Need to get 8865 kB of archives.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n] Y
Get:1 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 libnss-systemd amd64 255.4-1ubuntu8.2 [159 kB]
Get:2 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 systemd-dev all 255.4-1ubuntu8.2 [104 kB]
Get:3 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 systemd-timesyncd amd64 255.4-1ubuntu8.2 [35.3 kB]
Get:4 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 systemd-resolved amd64 255.4-1ubuntu8.2 [296 kB]
Get:5 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 libsystemd-shared amd64 255.4-1ubuntu8.2 [2072 kB]
Get:6 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 libsystemd0 amd64 255.4-1ubuntu8.2 [433 kB]
Get:7 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 systemd-sysv amd64 255.4-1ubuntu8.2 [11.9 kB]
Get:8 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 libpam-systemd amd64 255.4-1ubuntu8.2 [235 kB]
Get:9 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 systemd amd64 255.4-1ubuntu8.2 [3471 kB]
Get:10 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 udev amd64 255.4-1ubuntu8.2 [1873 kB]
Get:11 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 libudev1 amd64 255.4-1ubuntu8.2 [175 kB]
Fetched 8865 kB in 1s (7009 kB/s)   
(Reading database ... 34405 files and directories currently installed.)
Preparing to unpack .../0-libnss-systemd_255.4-1ubuntu8.2_amd64.deb ...
Unpacking libnss-systemd:amd64 (255.4-1ubuntu8.2) over (255.4-1ubuntu8.1) ...
Preparing to unpack .../1-systemd-dev_255.4-1ubuntu8.2_all.deb ...
Unpacking systemd-dev (255.4-1ubuntu8.2) over (255.4-1ubuntu8.1) ...
Preparing to unpack .../2-systemd-timesyncd_255.4-1ubuntu8.2_amd64.deb ...
Unpacking systemd-timesyncd (255.4-1ubuntu8.2) over (255.4-1ubuntu8.1) ...
Preparing to unpack .../3-systemd-resolved_255.4-1ubuntu8.2_amd64.deb ...
Unpacking systemd-resolved (255.4-1ubuntu8.2) over (255.4-1ubuntu8.1) ...
Preparing to unpack .../4-libsystemd-shared_255.4-1ubuntu8.2_amd64.deb ...
Unpacking libsystemd-shared:amd64 (255.4-1ubuntu8.2) over (255.4-1ubuntu8.1) ...
Preparing to unpack .../5-libsystemd0_255.4-1ubuntu8.2_amd64.deb ...
Unpacking libsystemd0:amd64 (255.4-1ubuntu8.2) over (255.4-1ubuntu8.1) ...
Setting up libsystemd0:amd64 (255.4-1ubuntu8.2) ...
(Reading database ... 34405 files and directories currently installed.)
Preparing to unpack .../systemd-sysv_255.4-1ubuntu8.2_amd64.deb ...
Unpacking systemd-sysv (255.4-1ubuntu8.2) over (255.4-1ubuntu8.1) ...
Preparing to unpack .../libpam-systemd_255.4-1ubuntu8.2_amd64.deb ...
Unpacking libpam-systemd:amd64 (255.4-1ubuntu8.2) over (255.4-1ubuntu8.1) ...
Preparing to unpack .../systemd_255.4-1ubuntu8.2_amd64.deb ...
Unpacking systemd (255.4-1ubuntu8.2) over (255.4-1ubuntu8.1) ...
Preparing to unpack .../udev_255.4-1ubuntu8.2_amd64.deb ...
Unpacking udev (255.4-1ubuntu8.2) over (255.4-1ubuntu8.1) ...
Preparing to unpack .../libudev1_255.4-1ubuntu8.2_amd64.deb ...
Unpacking libudev1:amd64 (255.4-1ubuntu8.2) over (255.4-1ubuntu8.1) ...
Setting up libudev1:amd64 (255.4-1ubuntu8.2) ...
Setting up systemd-dev (255.4-1ubuntu8.2) ...
Setting up libsystemd-shared:amd64 (255.4-1ubuntu8.2) ...
Setting up systemd (255.4-1ubuntu8.2) ...
Setting up systemd-timesyncd (255.4-1ubuntu8.2) ...
Setting up udev (255.4-1ubuntu8.2) ...
Setting up systemd-resolved (255.4-1ubuntu8.2) ...
Setting up systemd-sysv (255.4-1ubuntu8.2) ...
Setting up libnss-systemd:amd64 (255.4-1ubuntu8.2) ...
Setting up libpam-systemd:amd64 (255.4-1ubuntu8.2) ...
Processing triggers for libc-bin (2.39-0ubuntu8.2) ...
Processing triggers for man-db (2.12.0-4build2) ...
Processing triggers for dbus (1.14.10-4ubuntu4) ...
Processing triggers for initramfs-tools (0.142ubuntu25.1) ...
Scanning processes...                                                                                                                                                                                                                          
Scanning candidates...                                                                                                                                                                                                                         

Restarting services...
 systemctl restart packagekit.service polkit.service rsyslog.service udisks2.service

Service restarts being deferred:
 /etc/needrestart/restart.d/dbus.service
 systemctl restart systemd-logind.service
 systemctl restart unattended-upgrades.service

No containers need to be restarted.

No user sessions are running outdated binaries.

No VM guests are running outdated hypervisor (qemu) binaries on this host.
root at n:~# apt policy systemd
systemd:
  Installed: 255.4-1ubuntu8.2
  Candidate: 255.4-1ubuntu8.2
  Version table:
 *** 255.4-1ubuntu8.2 100
        100 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 Packages
        100 /var/lib/dpkg/status
     255.4-1ubuntu8.1 500
        500 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages
     255.4-1ubuntu8 500
        500 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages
root at n:~# systemctl show -p Nice systemd-logind.service
Nice=0
root at n:~# systemctl show -p Nice systemd-journald.service
Nice=-1
root at n:~# dpkg -S nice.conf
systemd: /usr/lib/systemd/system/systemd-journald.service.d/nice.conf


** Tags removed: verification-needed-noble
** Tags added: verification-done-noble

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/2067927

Title:
  systemd ships nice.conf override for wrong service

Status in systemd package in Ubuntu:
  Fix Committed
Status in systemd source package in Noble:
  Fix Committed

Bug description:
  [Impact]

  Prior to Noble (since Bionic or so), we shipped systemd-
  journald.service with Nice=-1 due to bug 1696970. In Noble, we
  intended to do this with a drop-in config instead of an out-of-tree
  patch [1]. But, this drop-in was mistakenly shipped for systemd-
  logind.service, instead of systemd-journald.service. This means the
  mitigation for bug 1696970 is no longer in place on Noble, and users
  could potentially see regressions.

  [Test]

  Check that systemd-journald.service has Nice=-1 configured (and that
  systemd-logind.service does not):

  $ systemctl show -p Nice systemd-journald.service 
  $ systemctl show -p Nice systemd-logind.service

  [Where problems could occur]

  Clearly, we should be careful that the drop-in is shipped for the
  correct service, otherwise we may apply the setting to the wrong unit.

  [Other information]

  I have not actually seen any regressions reported about this, but as
  we intended to keep the Nice=-1 setting for systemd-journald.service,
  we should restore it.

  [1] https://git.launchpad.net/~ubuntu-core-
  dev/ubuntu/+source/systemd/commit/?h=ubuntu-
  noble&id=9605a17332ee8a8dc9b390bd24acf116184b69d2

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2067927/+subscriptions