yahoo-eng-team team mailing list archive

[James Falcon <1962343@xxxxxxxxxxxxxxxxxx>]

This bug is believed to be fixed in cloud-init in version 22.4. If this
is still a problem for you, please make a comment and set the state back
to New

Thank you.

** Changed in: cloud-init
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to cloud-init.
https://bugs.launchpad.net/bugs/1962343

Title:
  VMs hardening with the noexec option in /tmp and /var/tmp which is
  causing issues to get an IP with cloud-init , reason why the VM takes
  like 25 min to start

Status in cloud-init:
  Fix Released

Bug description:

  Hardening Azure VM - Ubuntu 18.04  with the noexec option in /tmp and
  /var/tmp is causing issues with  the dhclient to get an IP with cloud-
  init , reason why the VM takes like 25 min to start


   
  Hardening:
   
  root@ubu1804repro:~# cat /etc/fstab
  # CLOUD_IMG: This file was created/modified by the Cloud Image build process
  UUID=5b1ab5d4-8b76-46c5-928f-8db42fbe3af6       /        ext4   defaults,discard        0 1
  UUID=91B6-4BB7  /boot/efi       vfat    umask=0077      0 1
  UUID="fadc7d49-1a88-4eed-8964-94b78ee7dfa6" /tmp ext4 rw,nodev,nosuid,noexec,discard 0 0
  /tmp /var/tmp none rw,noexec,nosuid,nodev,bind 0 0
  /dev/disk/cloud/azure_resource-part1   /mnt    auto    defaults,nofail,x-systemd.requires=cloud-init.service,comment=cloudconfig       0       2
   
   
  Error:
   
  [  OK  ] Reached target System Time Synchronized.
  [  OK  ] Started AppArmor initialization.
           Starting Load AppArmor profiles managed internally by snapd...
           Starting Initial cloud-init job (pre-networking)...
  [    8.062136] sh[795]: + [ -e /var/lib/cloud/instance/obj.pkl ]
  [  OK  ] [    8.097225] sh[795]: + echo cleaning persistent cloud-init object
  Started Load AppArmor profiles managed internally by snapd.
  [    8.100207] sh[795]: cleaning persistent cloud-init object
  [    8.106214] sh[795]: + rm /var/lib/cloud/instance/obj.pkl
  [    8.112706] sh[795]: + exit 0
  [   14.435302] cloud-init[813]: Cloud-init v. 21.4-0ubuntu1~18.04.1 running 'init-local' at Fri, 25 Feb 2022 17:18:50 +0000. Up 8.71 seconds.
  [   14.445225] cloud-init[813]: 2022-02-25 17:18:56,105 - dhcp.py[WARNING]: dhclient did not produce expected files: dhcp.leases, dhclient.pid
  [   14.453129] cloud-init[813]: 2022-02-25 17:18:56,107 - azure.py[WARNING]: exception while getting metadata:
  [   14.460876] cloud-init[813]: 2022-02-25 17:18:56,109 - azure.py[ERROR]: Could not crawl Azure metadata:
  [   19.626878] cloud-init[813]: 2022-02-25 17:19:01,297 - dhcp.py[WARNING]: dhclient did not produce expected files: dhcp.leases, dhclient.pid
  [   19.664700] cloud-init[813]: 2022-02-25 17:19:01,333 - azure.py[ERROR]: Failed to read /var/lib/dhcp/dhclient.eth0.leases: [Errno 2] No such file or directory: '/var/lib/dhcp/dhclient.eth0.leases'
  [   19.674221] cloud-init[813]: 2022-02-25 17:19:01,333 - azure.py[WARNING]: No lease found; using default endpoint: a8:3f:81:10
   
   
  Cloud-Init Version :
   
  root@ubu1804repro:~# cloud-init --version
  /usr/bin/cloud-init 21.4-0ubuntu1~18.04.1
  root@ubu1804repro:~# 
   
  OS version: 
   
  root@ubu1804repro:~# uname -a
  Linux ubu1804repro 5.4.0-1069-azure #72~18.04.1-Ubuntu SMP Mon Feb 7 11:12:24 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
  root@ubu1804repro:~# 
   
   
  root@ubu1804repro:~# cat /etc/*rele*
  DISTRIB_ID=Ubuntu
  DISTRIB_RELEASE=18.04
  DISTRIB_CODENAME=bionic
  DISTRIB_DESCRIPTION="Ubuntu 18.04.6 LTS"
  NAME="Ubuntu"
  VERSION="18.04.6 LTS (Bionic Beaver)"
  ID=ubuntu
  ID_LIKE=debian
  PRETTY_NAME="Ubuntu 18.04.6 LTS"
  VERSION_ID="18.04"
  HOME_URL="https://www.ubuntu.com/";
  SUPPORT_URL="https://help.ubuntu.com/";
  BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/";
  PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy";
  VERSION_CODENAME=bionic
  UBUNTU_CODENAME=bionic
  root@ubu1804repro:~# 
   
  Workaround :  Remove the noexec option from /tmp and /tmp/var entries in /etc/fstab.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1962343/+subscriptions