Bug 2324168

Summary: System update from F40 to F41: kea-dhcp unusable
Product: [Fedora] Fedora Reporter: Thomas Köller <thomas>
Component: keaAssignee: Martin Osvald 🛹 <mosvald>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 41CC: cheese, fjanus, mosvald, msuchy, tony, zdohnal
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: kea-2.6.3-1.fc43 kea-2.6.3-1.el9 kea-2.6.3-1.fc41 kea-2.6.3-1.fc42 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-06-09 05:08:01 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Thomas Köller 2024-11-06 13:21:19 UTC 
After upgrading from F40 to F41, the kea leases files had improper ownership and permissions, causing kea-dhcp[46].service to fail:

Nov 06 13:50:48 sarkovy kea-dhcp4[1603]: 2024-11-06 13:50:48.498 ERROR [kea-dhcp4.dhcp4/1603.139740914260096] DHCP4_CONFIG_LOAD_FAIL configuration error using file: /etc/kea/kea-dhcp4.conf, reason: Unable to open database: unable to open '/var/lib/kea/kea-leases4.csv.2'
Nov 06 13:50:48 sarkovy kea-dhcp4[1603]: 2024-11-06 13:50:48.498 ERROR [kea-dhcp4.dhcp4/1603.139740914260096] DHCP4_INIT_FAIL failed to initialize Kea server: configuration error using file '/etc/kea/kea-dhcp4.conf': Unable to open database: unable to open '/var/lib/kea/kea-leases4.csv.2'
Nov 06 13:50:48 sarkovy systemd[1]: kea-dhcp4.service: Main process exited, code=exited, status=1/FAILURE
Nov 06 13:50:48 sarkovy systemd[1]: kea-dhcp4.service: Failed with result 'exit-code'.

The reason is this:

[root@sarkovy ~]# ls -lZ /var/lib/kea/
total 20
-rw-r--r--. 1 kea  kea  system_u:object_r:var_lib_t:s0   65  3. Nov 23:21 kea-dhcp6-serverid
-rw-r-----. 1 kea  kea  system_u:object_r:var_lib_t:s0 1113  6. Nov 10:58 kea-leases4.csv
-rw-r--r--. 1 root root system_u:object_r:var_lib_t:s0  760  6. Nov 10:22 kea-leases4.csv.2
-rw-r-----. 1 kea  kea  system_u:object_r:var_lib_t:s0  589  6. Nov 10:59 kea-leases6.csv
-rw-r--r--. 1 root root system_u:object_r:var_lib_t:s0  312  6. Nov 10:22 kea-leases6.csv.2

Fixed it by executing these commands:

[root@sarkovy ~]# chown kea:kea /var/lib/kea/*.csv.2
[root@sarkovy ~]# chmod 640 /var/lib/kea/*.2
[root@sarkovy ~]# ls -lZ /var/lib/kea/
total 20
-rw-r--r--. 1 kea kea system_u:object_r:var_lib_t:s0   65  3. Nov 23:21 kea-dhcp6-serverid
-rw-r-----. 1 kea kea system_u:object_r:var_lib_t:s0 1113  6. Nov 10:58 kea-leases4.csv
-rw-r-----. 1 kea kea system_u:object_r:var_lib_t:s0  760  6. Nov 10:22 kea-leases4.csv.2
-rw-r-----. 1 kea kea system_u:object_r:var_lib_t:s0  589  6. Nov 10:59 kea-leases6.csv
-rw-r-----. 1 kea kea system_u:object_r:var_lib_t:s0  312  6. Nov 10:22 kea-leases6.csv.2

After this kea-dhcp services start as expected.
Comment 1 Martin Osvald 🛹 2025-06-05 09:41:08 UTC 
I will fix this soon with a rebase to 2.6.3 in f41-43 (and epel9). This problem could recur in epel9.
Comment 2 Fedora Update System 2025-06-09 04:53:24 UTC 
FEDORA-2025-29939eabac (kea-2.6.3-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-29939eabac
Comment 3 Fedora Update System 2025-06-09 05:08:01 UTC 
FEDORA-2025-29939eabac (kea-2.6.3-1.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 4 Fedora Update System 2025-06-09 11:58:51 UTC 
FEDORA-2025-dc6ec0a8e2 (kea-2.6.3-1.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-dc6ec0a8e2
Comment 5 Fedora Update System 2025-06-09 12:03:31 UTC 
FEDORA-2025-b870671130 (kea-2.6.3-1.fc41) has been submitted as an update to Fedora 41.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-b870671130
Comment 6 Fedora Update System 2025-06-09 14:28:15 UTC 
FEDORA-EPEL-2025-a36cdc1182 (kea-2.6.3-1.el9) has been submitted as an update to Fedora EPEL 9.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-a36cdc1182
Comment 7 Fedora Update System 2025-06-10 01:31:37 UTC 
FEDORA-2025-b870671130 has been pushed to the Fedora 41 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-b870671130`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-b870671130

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 8 Fedora Update System 2025-06-10 01:39:31 UTC 
FEDORA-EPEL-2025-a36cdc1182 has been pushed to the Fedora EPEL 9 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-a36cdc1182

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 9 Fedora Update System 2025-06-10 02:02:06 UTC 
FEDORA-2025-dc6ec0a8e2 has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-dc6ec0a8e2`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-dc6ec0a8e2

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 10 Fedora Update System 2025-06-19 00:44:52 UTC 
FEDORA-EPEL-2025-a36cdc1182 (kea-2.6.3-1.el9) has been pushed to the Fedora EPEL 9 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 11 Fedora Update System 2025-06-19 01:20:43 UTC 
FEDORA-2025-b870671130 (kea-2.6.3-1.fc41) has been pushed to the Fedora 41 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 12 Fedora Update System 2025-06-19 01:57:39 UTC 
FEDORA-2025-dc6ec0a8e2 (kea-2.6.3-1.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.