Re: [Jailkit-users] Error while loading shared libraries after jk_update

[Olivier Sessink]

On such a major change there are not only libraries that need an update, but also there might be completely new libraries needed. jk_update does not detect that. You need to run jk_init for your jail (or manually use jk_cp for all the binaries if you didn't make a config in jk_init for your jail).

I personally re-create a jail on such a major upgrade, so any old files are removed. But that is personal preference.

Olivier

On 27-10-2020 12:03, Denis Schneiter wrote:

Hello, 

Hope you are well. 

I tried to update my jail after an basic upgrade of ubuntu 20.04 and it remove an outdated library but when I tried to use my jail it don't find the new lib.

In detail I updated my os: $ sudo apt upgrade

  Reading package lists... Done

  Building dependency tree

  Reading state information... Done

  Calculating upgrade... Done

  The following packages will be upgraded:

    libargon2-1 libidn2-0 libpcre2-8-0 libpcre3 libssl1.1 libxml2 openssl

  7 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

After that I did a dry-run of jk_update: $ sudo jk_update -d -j /path/to/jail  -s /opt

  skip /path/to/jail /opt/

  will update outdated file /path/to/jail /lib/x86_64-linux-gnu/libxml2.so.2.9.10

  will update outdated file /path/to/jail /lib/x86_64-linux-gnu/libssl.so.1.1

  will update outdated file /path/to/jail /lib/x86_64-linux-gnu/libcrypto.so.1.1

  will update outdated file /path/to/jail /lib/x86_64-linux-gnu/libargon2.so.1

  will update outdated file /path/to/jail /lib/x86_64-linux-gnu/libpcre.so.3.13.3

  will update outdated file /path/to/jail /usr/lib/x86_64-linux-gnu/libxml2.so.2.9.10

  will update outdated file /path/to/jail /usr/lib/x86_64-linux-gnu/libssl.so.1.1

  will update outdated file /path/to/jail /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1

  will update outdated file /path/to/jail /usr/lib/x86_64-linux-gnu/libargon2.so.1

  will update outdated file /path/to/jail /usr/lib/x86_64-linux-gnu/libpcre.so.3.13.3

  will remove deprecated file /path/to/jail /lib/x86_64-linux-gnu/libpcre2-8.so.0.9.0

  will remove deprecated file /path/to/jail /lib/x86_64-linux-gnu/libidn2.so.0.3.6

  will remove deprecated file /path/to/jail /usr/lib/x86_64-linux-gnu/libpcre2-8.so.0.9.0

  will remove deprecated file /path/to/jail /usr/lib/x86_64-linux-gnu/libidn2.so.0.3.6

And process the jk_update: $ sudo jk_update -j /path/to/jail  -s /opt

  removing outdated file /path/to/jail /lib/x86_64-linux-gnu/libxml2.so.2.9.10

  removing outdated file /path/to/jail /lib/x86_64-linux-gnu/libssl.so.1.1

  removing outdated file /path/to/jail /lib/x86_64-linux-gnu/libcrypto.so.1.1

  removing outdated file /path/to/jail /lib/x86_64-linux-gnu/libargon2.so.1

  removing outdated file /path/to/jail /lib/x86_64-linux-gnu/libpcre.so.3.13.3

  removing deprecated file /path/to/jail /lib/x86_64-linux-gnu/libpcre2-8.so.0.9.0

  removing deprecated file /path/to/jail /lib/x86_64-linux-gnu/libidn2.so.0.3.6

  skip /path/to/jail /opt/

  Copying /lib/x86_64-linux-gnu/libxml2.so.2.9.10 to /path/to/jail /usr/lib/x86_64-linux-gnu/libxml2.so.2.9.10

  Copying /lib/x86_64-linux-gnu/libssl.so.1.1 to /path/to/jail /usr/lib/x86_64-linux-gnu/libssl.so.1.1

  Copying /lib/x86_64-linux-gnu/libcrypto.so.1.1 to /path/to/jail /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1

  Copying /lib/x86_64-linux-gnu/libargon2.so.1 to /path/to/jail /usr/lib/x86_64-linux-gnu/libargon2.so.1

  Copying /lib/x86_64-linux-gnu/libpcre.so.3.13.3 to /path/to/jail /usr/lib/x86_64-linux-gnu/libpcre.so.3.13.3

After that when I go to the chrooted user and I do a simple "ls" command I have this error message: "ls: error while loading shared libraries: libpcre2-8.so.0: cannot open shared object file: No such file or directory".

That's because he removed the file /path/to/jail/usr/lib/x86_64-linux-gnu/libpcre.so.2.8.0 but will not use the new one (/path/to/jail/usr/lib/x86_64-linux-gnu/libpcre.so.3)

Do you have an idea to fix that ?

Do I need to restart the server or recreate from scratch the jail ? 

Thanks a lot for you answer

Au plaisir, 

Denis

_______________________________________________
Jailkit-users mailing list
Jailkit-users@nongnu.org
https://lists.nongnu.org/mailman/listinfo/jailkit-users

-- 
Bluefish website http://bluefish.openoffice.nl/
Blog http://oli4444.wordpress.com/