6.1.0 Update

[Dan Waldow]

After updating all my systems (system and 4 clients) to the latest version, I continually get errors related  to a "necessary security context" that could not be created.  Unrelated (I believe) I am also getting a pkg_resource deprecated warning on the minarca command line (Windows and Linux/Ubuntu).

command running:

root@waldow1:/etc/sysctl.d# minarca backup --force
PyInstaller/loader/pyimod02_importers.py:385: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
keep awake not supported on this system
instance 0: backup START
instance 0: backup FAILED
The remote server could not create the necessary security context, which may indicate an issue with the server. If the problem persists, please contact your system administrator to review the server logs and diagnose the cause.
None

error log:

2025-06-14 09:41:00,335 [24995][DEBUG][MainThread  ] Starting new HTTPS connection (1): latest.ikus-soft.com:443
2025-06-14 09:41:00,559 [24995][DEBUG][MainThread  ] https://latest.ikus-soft.com:443 "GET /minarca/latest_version HTTP/1.1" 200 5
2025-06-14 09:41:00,580 [24995][DEBUG][MainThread  ] instance 0: starting backup with force: True
2025-06-14 09:41:00,580 [24995][WARNI][MainThread  ] keep awake not supported on this system
2025-06-14 09:41:00,580 [24995][INFO ][MainThread  ] instance 0: backup START
2025-06-14 09:41:00,581 [24995][DEBUG][MainThread  ] instance 0: remote schema: /usr/bin/ssh -F /dev/null -oBatchMode=yes -oPreferredAuthentications=publickey -oUserKnownHostsFile=/etc/minarca/known_hosts0 -oIdentitiesOnly=yes -i /etc/minarca/id_rsa0 %s 'minarca/6.1.0 rdiff-backup/2.2.6 (Linux 6.8.0-60-generic x86_64)'
2025-06-14 09:41:00,581 [24995][DEBUG][MainThread  ] instance 0: constructing backup path for /
2025-06-14 09:41:00,581 [24995][DEBUG][MainThread  ] instance 0: remote backup path: min...@10.2.0.201::r-waldow1/
2025-06-14 09:41:00,581 [24995][DEBUG][MainThread  ] instance 0: executing command: rdiff-backup -v 5 --remote-schema "/usr/bin/ssh -F /dev/null -oBatchMode=yes -oPreferredAuthentications=publickey -oUserKnownHostsFile=/etc/minarca/known_hosts0 -oIdentitiesOnly=yes -i /etc/minarca/id_rsa0 %s 'minarca/6.1.0 rdiff-backup/2.2.6 (Linux 6.8.0-60-generic x86_64)'" backup --exclude-sockets --no-compression --exclude /opt/dock/kopia/ --exclude /home/dan/.cache --include /home/dan --include /opt/dock --include "/opt/sync.*" --include /var/log --include /etc --include /root --exclude "/**" / min...@10.2.0.201::r-waldow1/
2025-06-14 09:41:04,587 [24995][ERROR][MainThread  ] instance 0: backup FAILED
2025-06-14 09:41:04,589 [24995][INFO ][MainThread  ] The remote server could not create the necessary security context, which may indicate an issue with the server. If the problem persists, please contact your system administrator to review the server logs and diagnose the cause.
2025-06-14 09:41:04,590 [24995][INFO ][MainThread  ] None

linux/server/client version:

root@waldow1:/etc/minarca# minarca --version
PyInstaller/loader/pyimod02_importers.py:385: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
minarca 6.1.0

shell.log:

[2025-06-14 09:13:35,871][INFO   ][10.2.1.40][admin][PID:2008895][minarca_server.shell] running command [/usr/bin/rdiff-backup-2.2 --server] in jail [/mnt/backups/admin] for: minarca/6.1.0 rdiff-backup/2.2.6 (Windows 11 AMD64)
[2025-06-14 09:13:36,621][INFO   ][10.2.1.40][admin][PID:2008895][minarca_server.shell] rdiff-backup terminated successfully
[2025-06-14 09:23:24,295][INFO   ][10.2.0.201][admin][PID:11123][__main__] running command [/usr/bin/rdiff-backup-2.2 --server] in jail [/mnt/backups/admin] for: minarca/6.1.0 rdiff-backup/2.2.6 (Linux 6.8.0-60-generic x86_64)
[2025-06-14 09:23:24,314][ERROR  ][10.2.0.201][admin][PID:11123][__main__] fail to create rdiff-backup jail
Traceback (most recent call last):
  File "minarca_server/shell.py", line 68, in _jail
  File "snakeoil/contexts.py", line 239, in __invoke_trace_funcs
  File "snakeoil/contexts.py", line 214, in __exit_context
snakeoil.contexts.SplitExec.ParentException

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "minarca_server/shell.py", line 192, in main
  File "minarca_server/shell.py", line 67, in _jail
  File "snakeoil/contexts.py", line 165, in __exit__
PermissionError: [Errno 13] Permission denied: '/proc/self/setgroups'
[2025-06-14 09:23:36,996][INFO   ][10.2.0.201][admin][PID:11444][__main__] running command [/usr/bin/rdiff-backup-2.2 --server] in jail [/mnt/backups/admin] for: minarca/6.1.0 rdiff-backup/2.2.6 (Linux 6.8.0-60-generic x86_64)
[2025-06-14 09:23:37,007][ERROR  ][10.2.0.201][admin][PID:11444][__main__] fail to create rdiff-backup jail
Traceback (most recent call last):
  File "minarca_server/shell.py", line 68, in _jail
  File "snakeoil/contexts.py", line 239, in __invoke_trace_funcs
  File "snakeoil/contexts.py", line 214, in __exit_context
snakeoil.contexts.SplitExec.ParentException

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "minarca_server/shell.py", line 192, in main
  File "minarca_server/shell.py", line 67, in _jail
  File "snakeoil/contexts.py", line 165, in __exit__
PermissionError: [Errno 13] Permission denied: '/proc/self/setgroups'
[2025-06-14 09:24:39,221][INFO   ][10.2.0.201][admin][PID:12811][__main__] running command [/usr/bin/rdiff-backup-2.2 --server] in jail [/mnt/backups/admin] for: minarca/6.1.0 rdiff-backup/2.2.6 (Linux 6.8.0-60-generic x86_64)
[2025-06-14 09:24:39,233][ERROR  ][10.2.0.201][admin][PID:12811][__main__] fail to create rdiff-backup jail
Traceback (most recent call last):
  File "minarca_server/shell.py", line 68, in _jail
  File "snakeoil/contexts.py", line 239, in __invoke_trace_funcs
  File "snakeoil/contexts.py", line 214, in __exit_context
snakeoil.contexts.SplitExec.ParentException

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "minarca_server/shell.py", line 192, in main
  File "minarca_server/shell.py", line 67, in _jail
  File "snakeoil/contexts.py", line 165, in __exit__
PermissionError: [Errno 13] Permission denied: '/proc/self/setgroups'
[2025-06-14 09:27:56,741][INFO   ][10.2.0.201][admin][PID:15279][__main__] running command [/usr/bin/rdiff-backup-2.2 --server] in jail [/mnt/backups/admin] for: minarca/6.1.0 rdiff-backup/2.2.6 (Linux 6.8.0-60-generic x86_64)
[2025-06-14 09:27:56,753][ERROR  ][10.2.0.201][admin][PID:15279][__main__] fail to create rdiff-backup jail
Traceback (most recent call last):
  File "minarca_server/shell.py", line 68, in _jail
  File "snakeoil/contexts.py", line 239, in __invoke_trace_funcs
  File "snakeoil/contexts.py", line 214, in __exit_context
snakeoil.contexts.SplitExec.ParentException

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "minarca_server/shell.py", line 192, in main
  File "minarca_server/shell.py", line 67, in _jail
  File "snakeoil/contexts.py", line 165, in __exit__
PermissionError: [Errno 13] Permission denied: '/proc/self/setgroups'
[2025-06-14 09:41:01,609][INFO   ][10.2.0.201][admin][PID:25095][__main__] running command [/usr/bin/rdiff-backup-2.2 --server] in jail [/mnt/backups/admin] for: minarca/6.1.0 rdiff-backup/2.2.6 (Linux 6.8.0-60-generic x86_64)
[2025-06-14 09:41:01,621][ERROR  ][10.2.0.201][admin][PID:25095][__main__] fail to create rdiff-backup jail
Traceback (most recent call last):
  File "minarca_server/shell.py", line 68, in _jail
  File "snakeoil/contexts.py", line 239, in __invoke_trace_funcs
  File "snakeoil/contexts.py", line 214, in __exit_context
snakeoil.contexts.SplitExec.ParentException

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "minarca_server/shell.py", line 192, in main
  File "minarca_server/shell.py", line 67, in _jail
  File "snakeoil/contexts.py", line 165, in __exit__
PermissionError: [Errno 13] Permission denied: '/proc/self/setgroups'

access and server logs - clean.

Lastly tried to reconfigure becaues connectivity status is Not Connected.  But get the same error:

root@waldow1:/etc/minarca# minarca configure -r http://10.2.0.201:8080 -u admin -p 'xxxxxxxx' -n r-waldow1
PyInstaller/loader/pyimod02_importers.py:385: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
Destination `r-waldow1` already exists. (Error: 104)
Do you want to replace the existing repository? (Yes/No): yes
The remote server could not create the necessary security context, which may indicate an issue with the server. If the problem persists, please contact your system administrator to review the server logs and diagnose the cause.
None

Please let me know if I am following the right process and if I can provide additional information.  I am new to Minarca, so I am still getting a feel for the support model.

Thanks in advance!

Dan

[Patrik Dufresne]

Hello Dan,

I'm sorry you are facing issues after upgrading to the latest version 6.1.0. The error raised by the client indicates a failure to create the unprivileged user namespace. If this was working with the previous version that is surprising.

> PermissionError: [Errno 13] Permission denied: '/proc/self/setgroups'

On the server make sure the file "/etc/sysctl.d/00-minarca-server-userns.conf" exists with the following content:

cat /etc/sysctl.d/00-minarca-server-userns.conf
  kernel.unprivileged_userns_clone=1
  kernel.apparmor_restrict_unprivileged_userns=0

Also make sure the changes are applied after reboot.

 

cat /proc/sys/kernel/apparmor_restrict_unprivileged_userns
0

cat /proc/sys/kernel/unprivileged_userns_clone

1

P.S. I will take a look to avoid the warning about pkg_resources.

--
You received this message because you are subscribed to the Google Groups "Minarca Data Backup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to minarca+u...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/minarca/CAJrNRiVSDOs549OH%3Dk6C93Dbs4Kuqt%2BAeAueLHEDKQCj18ghRQ%40mail.gmail.com.

--

** Par mesure d'efficacité, je consulte mes courriels une fois par jour.

IKUS Software

https://www.ikus-soft.com/

514-971-6442

St-Colomban, QC J5K 1T9

[Lochlan Jones]

Hello, I was having a similar issue and used this post as reference while solving. It seems that Ubuntu 24-04 has issues loading a config file with a leading 0 on startup. You can make a change to the file "/etc/sysctl.d/00-minarca-server-userns.conf" to any other leading number (10-minarca-server-userns.conf for example) and it will apply the necessary changes on a reboot. 

Thank you.

[Patrik Dufresne]

Thanks for sharing this! I wasn't aware of the issue with leading zeros in config filenames on Ubuntu 24.04. Before I make the change, could someone on the list confirm whether 00-minarca-server-userns.conf should indeed be renamed to 10-minarca-server-userns.conf to ensure it gets applied properly on reboot on Ubuntu ?

To view this discussion visit https://groups.google.com/d/msgid/minarca/32b9b8a4-07e0-48a9-a750-5a0c0b19dd65n%40googlegroups.com.

[Lucas Burdick]

I can confirm I had to do this in order to get it to apply.
Also, can we please get a fix for the deprecated package? It's causing cron emails to be sent every 15 mins. 

[Dan Waldow]

My apologies for the delay (unplanned surgery needed).  My input from above is below.

Note that I decided as I was refreshing myself on the issue (needed due to pain killers), that I would just reinstall both client and server (both on same system) to level set the playing field.  After the reinstall, the connection error was solved.  So not sure it is working now with no issues other than the pkg_resource warning.  Note that I am running Ubuntu 24.04.2 and have the 00 proceeding that config file mentioned.

Appreciate the support and again sorry for the delay.

dan@waldow1:~ $ cat /proc/sys/kernel/apparmor_restrict_unprivileged_userns
───────┬─────────────────────────────────────────────────────────────────────────────
       │ File: /proc/sys/kernel/apparmor_restrict_unprivileged_userns
───────┼─────────────────────────────────────────────────────────────────────────────
   1   │ 0
───────┴─────────────────────────────────────────────────────────────────────────────
dan@waldow1:~ $ cat /proc/sys/kernel/unprivileged_userns_clone
───────┬─────────────────────────────────────────────────────────────────────────────
       │ File: /proc/sys/kernel/unprivileged_userns_clone
───────┼─────────────────────────────────────────────────────────────────────────────
   1   │ 1
───────┴─────────────────────────────────────────────────────────────────────────────
dan@waldow1:~ $ cd /etc/sysctl.d
dan@waldow1:/etc/sysctl.d $ l
root  4 Jun 18:20  00-minarca-local-userns.conf
root 18 Apr 11:37  00-minarca-server-userns.conf
root 26 Sep  2024  10-bufferbloat.conf
root 31 Mar  2024  10-console-messages.conf
root 31 Mar  2024  10-ipv6-privacy.conf
root 31 Mar  2024  10-kernel-hardening.conf
root 31 Mar  2024  10-magic-sysrq.conf
root 31 Mar  2024  10-map-count.conf
root 31 Mar  2024  10-network-security.conf
root 31 Mar  2024  10-ptrace.conf
root 31 Mar  2024  10-zeropage.conf
root  4 Jun 05:24  99-sysctl.conf -> ../sysctl.conf
root 24 Mar  2024  README.sysctl
dan@waldow1:/etc/sysctl.d $ cat 00-minarca-server-userns.conf
───────┬─────────────────────────────────────────────────────────────────────────────
       │ File: 00-minarca-server-userns.conf
───────┼─────────────────────────────────────────────────────────────────────────────
   1   │ kernel.unprivileged_userns_clone=1
   2   │ kernel.apparmor_restrict_unprivileged_userns=0
───────┴─────────────────────────────────────────────────────────────────────────────
dan@waldow1:/etc/sysctl.d $ uname -r
6.8.0-60-generic
dan@waldow1:/etc/sysctl.d $ cat /etc/lsb-release
───────┬─────────────────────────────────────────────────────────────────────────────
       │ File: /etc/lsb-release
───────┼─────────────────────────────────────────────────────────────────────────────
   1   │ DISTRIB_ID=Ubuntu
   2   │ DISTRIB_RELEASE=24.04
   3   │ DISTRIB_CODENAME=noble
   4   │ DISTRIB_DESCRIPTION="Ubuntu 24.04.2 LTS"
───────┴────────────────────────────────────────

[Dan Waldow]

... for clarity, this sentence -- "So not sure it is working now with no issues other than the pkg_resource warning" -- should read -- "It is working now with no issues other than the pkg_resource warning"

[Patrik Dufresne]

Hello Dan,

Hello Lucas,

@Dan — sorry to hear about your surgery. I hope you’re recovering well!

Just a quick update: I’ve made some modifications to the Minarca client in version 6.1.1 to eliminate the pkg_resources warnings. I’ve applied the same fix to the rdiff-backup builds and minarca-server version 6.1.2.

I’ve also renamed the sysctl config file from 00-minarca-server-userns.conf to 10-minarca-server-userns.conf

Let me know if anything looks off or if further changes are needed.

To view this discussion visit https://groups.google.com/d/msgid/minarca/d6c4abdb-1c46-4f38-a811-18d0fccda4afn%40googlegroups.com.

[Dan Waldow]

Looks good on Mac (client) and Linux (client and server).  Connection shows good all around and no pkg warning!  Thank you for your top shelf support on this!

⚡  ~ /Applications/Minarca.app/Contents/MacOS/minarca status
Verifying connection...
Backup Instance: Dans-Mac-mini
==============================
 * Identifier:             0
 * Remote server:          10.10.20.20
 * Connectivity status:    Connected
 * Last successful backup: 2025-06-20T10:08:42-0700
 * Last backup date:       2025-06-20T10:08:42-0700
 * Last backup status:     SUCCESS

⚡  ~

[Patrik Dufresne]

Great ! Thanks for the update.

To view this discussion visit https://groups.google.com/d/msgid/minarca/7e9781ef-6a64-41f9-8801-5cc06aec5842n%40googlegroups.com.

[Lucas Burdick]

I can also confirm that with the newest client/server updates, the deprecation warning is gone. My email inbox thanks you!  🙏