#931344 check-support-status makes apt-get upgrade *extremely* slow

#931344#5
Date:
2019-07-02 16:33:43 UTC
From:
To:
Hello,

I'm upgrading a box from jessie to stretch. `apt-get upgrade` is taking
*extremely* long. Installing a single package is taking minutes.

When I check `ps faux` I see that there's a process `check-support-status`
at the end of the `apt-get upgrade` process chain.

So I:

    mv /usr/share/debian-security-support/check-support-status.hook /usr/share/debian-security-support/check-support-status.hook.nook

and from the next package on, the install gets real quick, as usual, a
package install every second or so.

Disk speed here looks OK, it's around 150MB/s. Network speed, a `wget`
from a kernel.org is at about 80MB/s.

Without irony: thanks a lot for debian-security-support!!! Greetings,
*t

#931344#12
Date:
2020-02-21 18:14:51 UTC
From:
To:
Hi Tomas,
Please change from su to runuser" and I wonder if this fixes this issue as well,
because "su" starts a full pam session, while "runuser" doesnt do that (and
I suspect some pam things slowed down your installation).

Can you confirm? (If needed I could provide backports of debian-security-support
2020-02-21 for you for jessie or stretch, but you could also build that package
yourself...)
-------------------------------------------------------------------------------
               holger@(debian|reproducible-builds|layer-acht).org
       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C

#931344#17
Date:
2020-02-21 18:14:51 UTC
From:
To:
Hi Tomas,
Please change from su to runuser" and I wonder if this fixes this issue as well,
because "su" starts a full pam session, while "runuser" doesnt do that (and
I suspect some pam things slowed down your installation).

Can you confirm? (If needed I could provide backports of debian-security-support
2020-02-21 for you for jessie or stretch, but you could also build that package
yourself...)
-------------------------------------------------------------------------------
               holger@(debian|reproducible-builds|layer-acht).org
       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C

#931344#24
Date:
2021-01-10 23:37:11 UTC
From:
To:
Dear Maintainer,
I ran into this when upgrading from stretch to buster during 2020/21
hollidays,
which means I was definitely running d-s-s 1:9+2020.12.04 from
buster-security.
The system was low on RAM and both /tmp and swap were backed by a slow
SD card.

This is caused by
/usr/share/debian-security-support/check-support-status.hook,
which is runs either for too long or too frequently.

It is most likely the latter case, because when I repeatedly execute 'ps
-A f'
during apt operation, check-support-status is listed present >60% of the
time.
I guess each invocation takes only few seconds, but it gets invoked too
often.


Cheers,
n-b-f