Package: linux-image-4.9.0-6-amd64 Version: 4.9.88-1 Issue: ======
Kernel "linux-image-4.9.0-6-amd64," version 4.9.88-1, breaks systemd startup of RPC, Kerberos KDC services. Description: ============ After upgrading to the latest Stretch kernel (4.9.88-1), RPC and KDC services time out during the boot process. This issue is being seen on a Kerberos KDC that is also an NFS client. Kerberos auth. and encryption are being used with NFS in this environment, and this KDC provides the Kerberos services for that to work. Network is functional prior to these services starting, which is proper. After the server has booted completely, I can issue `service krb5-kdc restart` and, after a short delay, the KDC service starts normally. Not sure if this is a kernel bug, a systemd bug, or something else. Since the kernel package was the only thing that was upgraded before the issue started, I'm leaning toward the kernel. Relevant output from /var/log/syslog: ------------------------------------- May 4 09:03:17 <redacted> systemd[1]: rpc-svcgssd.service: Start operation timed out. Terminating. May 4 09:03:17 <redacted> systemd[1]: Failed to start RPC security service for NFS server. May 4 09:03:17 <redacted> systemd[1]: rpc-svcgssd.service: Unit entered failed state. May 4 09:03:17 <redacted> systemd[1]: rpc-svcgssd.service: Failed with result 'timeout'. May 4 09:03:17 <redacted> systemd[1]: rpc-gssd.service: Start operation timed out. Terminating. May 4 09:03:17 <redacted> systemd[1]: Failed to start RPC security service for NFS client and server. May 4 09:03:17 <redacted> systemd[1]: rpc-gssd.service: Unit entered failed state. May 4 09:03:17 <redacted> systemd[1]: rpc-gssd.service: Failed with result 'timeout'. May 4 09:03:20 <redacted> systemd[1]: krb5-kdc.service: Start operation timed out. Terminating. May 4 09:03:20 <redacted> systemd[1]: Failed to start Kerberos 5 Key Distribution Center. May 4 09:03:20 <redacted> systemd[1]: krb5-kdc.service: Unit entered failed state.29s random time. May 4 09:03:20 <redacted> systemd[1]: krb5-kdc.service: Failed with result 'timeout'. random time. Workaround: =========== Rolling back to Stretch kernel 4.9.82-1+deb9u3 fixes the issue. Setup: ====== 1. KDC package: krb5-kdc 1.15-1+deb9u1 2. NFS package: nfs-common 1:1.3.4-2.1 3. Kernel: linux-image-4.9.0-6-amd64 4.9.88-1 4. Systemd version: 232-25+deb9u3 5. Server is a 64-bit Xen PV domU