Did OpenAudible try to delete / during uninstallation?

[RokeJulianLockhart]

https://forums.opensuse.org/t/did-openaudible-try-to-delete-during-uninstallation/169402/2

I used https://github.com/openaudible/openaudible/releases/download/v3.9/OpenAudible_3.9_x86_64.rpm

RokeJulianLockhart@s1e8h4:~> sudo zypper remove OpenAudible
Reading installed packages...
Resolving package dependencies...

The following package is going to be REMOVED:
  OpenAudible

1 package to remove.
After the operation, 173.3 MiB will be freed.
Continue? [y/n/v/...? shows all options] (y): y
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
(1/1) Removing OpenAudible-3.9-1.i386 ................................................................................................................................................................................................................................................................................[done]
There are running programs which still use files and libraries deleted or updated by recent upgrades. They should be restarted to benefit from the latest updates. Run 'zypper ps -s' to list these programs.
 
RokeJulianLockhart@s1e8h4:~>

I don’t know what to make of those errors.

[openaudible]

Uh.. that looks not good...
No reports like this one.
I would use the .sh installer instead.

[RokeJulianLockhart]

#1274 (comment)

No reports like this one.

@openaudible, have you tried to reproduce this using <= cpe:/o:opensuse:tumbleweed:20240131?

[openaudible]

This is confirmed. This could be an install4j bug, a zypper bug... or a combination of the two. (Not us, of course!)
We don't add anything to the RPM that tells zypper to delete the root directory.

Edit: You can see what we install and should be removed using rpm -ql OpenAudible and everything is in the /opt/OpenAudible directory.

While it sounds scary, this is just a warning.. as you can type rm / all day long and it won't do anything.

Since I believe this is a zypper bug (not checking the path of an item to delete) the best way to debug this may be to run zypper using a source level debugger with a breakpoint on that warning message.

Luckily, it is easily reproduced.

I'd also like to know how to fix the "Signature verification failed" as the RPM is signed.

Unfortunately, using the --verbose flag doesn't give any indication of what is going on.

Steps to reproduce:

cd ~/Downloads
wget https://openaudible.org/latest/OpenAudible_x86_64.rpm

rpm --checksig -v OpenAudible*.rpm 
OpenAudible_4.0.3_x86_64.rpm:
    Header SHA256 digest: OK
    Header SHA1 digest: OK
    Payload SHA256 digest: OK
    MD5 digest: OK

sudo zypper in Open*.rpm

Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following NEW package is going to be installed:
  OpenAudible

1 new package to install.
Overall download size: 78.3 MiB. Already cached: 0 B. After the operation, additional 175.1 MiB will be used.
Continue? [y/n/v/...? shows all options] (y): y
Retrieving: OpenAudible-4.0.3-1.i386 (Plain RPM files cache)                                                                                                                                                (1/1),  78.3 MiB    
OpenAudible_4.0.3_x86_64.rpm:
    Package header is not signed!

OpenAudible-4.0.3-1.i386 (Plain RPM files cache): Signature verification failed [6-File is unsigned]
Abort, retry, ignore? [a/r/i] (a): i

Checking for file conflicts: .............................................................................................................................................................................................[done]
(1/1) Installing: OpenAudible-4.0.3-1.i386 ...............................................................................................................................................................................[done]


# App is installed and working as expected at this point and can be run

sudo zypper --verbose remove OpenAudible
Verbosity: 2
Non-option program arguments: 'OpenAudible' 
Initializing Target
Reading installed packages...
Selecting 'OpenAudible-4.0.3-1.i386' for removal.
Resolving package dependencies...
Force resolution: Yes

The following package is going to be REMOVED:
  OpenAudible  4.0.3-1

1 package to remove.
After the operation, 175.1 MiB will be freed.
Continue? [y/n/v/...? shows all options] (y): y
committing
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
... [repeated] 
warning: directory /: remove failed: Device or resource busy
warning: directory /: remove failed: Device or resource busy
(1/1) Removing OpenAudible-4.0.3-1.i386 ..................................................................................................................................................................................[done]
CommitResult  (total 1, done 1, error 0, skipped 0, updateMessages 0)
Checking for running processes using deleted libraries...
 # Software is successfully removed!

Update: The install4j program can be installed successfully using the rpm, but also shows the "unsigned header" warning.. but doesn't show unable to remove / warning.

[openaudible]

I sent a message off to Install4J and they fixed it in their latest beta. (Something about the new zypper doesn't handle directory names ending with a slash. I have a beta that fixes the OpenAudible installer as well if anyone wants to test it-- but we are adding some new features so waiting for the next release is recommended.

[RokeJulianLockhart]

#1274 (comment)

@openaudible, do you have a URI to that report? I'd like to see it. Thank you for the effort.

[openaudible]

No report-- it was just an email from install4j that confirmed and fixed the problem. Perhaps it will be in the release notes for the next Install4J production version.

[openaudible]

This will be fixed in all versions after 4.0.3 and in any current beta.
Install4J created a new version that resolves this.
To reiterate, the rpm/zypper uninstaller never attempts to remove anything recursively, so earlier versions are safe to use.