[Bug]: (Proxmox/Debian) kickstart not working, couldn't be accessed by user '_apt'

[Clete2]

Bug description

I signed up for the cloud trial and tried the wget instructions on my Proxmox (debian) system, but it failed, saying that it was built with --disable-cloud option

Expected behavior

The kickstart should work

Steps to reproduce

1. Install Proxmox latest version with all packages up-to-date
2. Run the kickstart wget method
3. :(
   ...

Installation method

kickstart.sh

System info

Linux cleteServer 6.5.11-7-pve #1 SMP PREEMPT_DYNAMIC PMX 6.5.11-7 (2023-12-05T09:44Z) x86_64 GNU/Linux
/etc/os-release:PRETTY_NAME="Debian GNU/Linux 12 (bookworm)"
/etc/os-release:NAME="Debian GNU/Linux"
/etc/os-release:VERSION_ID="12"
/etc/os-release:VERSION="12 (bookworm)"
/etc/os-release:VERSION_CODENAME=bookworm
/etc/os-release:ID=debian

Netdata build info

root@cleteServer:~# $(ps aux | grep -m1 -E -o "[a-zA-Z/]+netdata ") -W buildinfo
Version: netdata v1.37.1
Configure options:  '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking' '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' '--runstatedir=/run' '--disable-maintainer-mode' '--disable-dependency-tracking' '--libdir=/usr/lib' '--libexecdir=/usr/lib' '--disable-cloud' '--enable-x86-sse' '--disable-exporting-prometheus-remote-write' '--enable-dbengine' '--enable-https' '--enable-plugin-cups' '--enable-plugin-nfacct' '--with-math' 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -ffile-prefix-map=/build/netdata-aGlU9O/netdata-1.37.1=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -O3' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -Wl,--as-needed' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -ffile-prefix-map=/build/netdata-aGlU9O/netdata-1.37.1=. -fstack-protector-strong -Wformat -Werror=format-security'
Install type: unknown
Features:
    dbengine:                   YES
    Native HTTPS:               YES
    Netdata Cloud:              NO (by user request)
    ACLK:                       NO
    TLS Host Verification:      YES
    Machine Learning:           NO
    Stream Compression:         YES
Libraries:
    protobuf:                YES (system)
    jemalloc:                NO
    JSON-C:                  YES
    libcap:                  YES
    libcrypto:               YES
    libm:                    YES
    tcalloc:                 NO
    zlib:                    YES
Plugins:
    apps:                    YES
    cgroup Network Tracking: YES
    CUPS:                    YES
    EBPF:                    NO
    IPMI:                    NO
    NFACCT:                  YES
    perf:                    YES
    slabinfo:                YES
    Xen:                     NO
    Xen VBD Error Tracking:  NO
Exporters:
    AWS Kinesis:             NO
    GCP PubSub:              NO
    MongoDB:                 NO
    Prometheus Remote Write: NO
Debug/Developer Features:
    Trace Allocations:       NO

Additional info

Install logs:

 ⚡  ~  wget -O /tmp/netdata-kickstart.sh https://get.netdata.cloud/kickstart.sh && sh /tmp/netdata-kickstart.sh --stable-channel --claim-token <token> --claim-rooms <room> --claim-url https://app.netdata.cloud
--2024-02-08 21:48:44--  https://get.netdata.cloud/kickstart.sh
Resolving get.netdata.cloud (get.netdata.cloud)... 104.26.8.141, 104.26.9.141, 172.67.72.170, ...
Connecting to get.netdata.cloud (get.netdata.cloud)|104.26.8.141|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 88187 (86K) [application/octet-stream]
Saving to: ‘/tmp/netdata-kickstart.sh’

/tmp/netdata-kickstart.sh                     100%[==============================================================================================>]  86.12K  --.-KB/s    in 0.006s

2024-02-08 21:48:44 (13.5 MB/s) - ‘/tmp/netdata-kickstart.sh’ saved [88187/88187]


 --- Using /tmp/netdata-kickstart-X70OXCYHSn as a temporary directory. ---
 --- Checking for existing installations of Netdata... ---
 --- No existing installations of netdata found, assuming this is a fresh install. ---
 --- Attempting to install using native packages... ---
 --- Checking for availability of repository configuration package. ---
[/tmp/netdata-kickstart-X70OXCYHSn]# /usr/bin/curl --fail -q -sSL --connect-timeout 10 --retry 3 --output /tmp/netdata-kickstart-X70OXCYHSn/netdata-repo_2-2+debian12_all.deb https://repo.netdata.cloud/repos/repoconfig/debian/bookworm/netdata-repo_2-2+debian12_all.deb
 OK

[/tmp/netdata-kickstart-X70OXCYHSn]# env apt-get update
Get:1 http://security.debian.org bookworm-security InRelease [48.0 kB]
Hit:2 https://download.docker.com/linux/debian bookworm InRelease
Get:3 http://download.proxmox.com/debian/pve bookworm InRelease [2,768 B]
Hit:4 http://ftp.us.debian.org/debian bookworm InRelease
Get:5 http://ftp.us.debian.org/debian bookworm-backports InRelease [56.5 kB]
Get:6 http://security.debian.org bookworm-security/main amd64 Packages [137 kB]
Hit:7 http://apt.puppetlabs.com bullseye InRelease
Hit:8 http://apt.puppet.com bullseye InRelease
Get:9 http://ftp.us.debian.org/debian bookworm-backports/main amd64 Packages.diff/Index [63.3 kB]
Get:10 http://ftp.us.debian.org/debian bookworm-backports/main amd64 Packages T-2024-02-08-2011.34-F-2024-02-08-1416.07.pdiff [465 B]
Get:10 http://ftp.us.debian.org/debian bookworm-backports/main amd64 Packages T-2024-02-08-2011.34-F-2024-02-08-1416.07.pdiff [465 B]
Fetched 308 kB in 1s (328 kB/s)
Reading package lists... Done
 OK

[/tmp/netdata-kickstart-X70OXCYHSn]# find /var/cache/apt/archives -type f -name netdata*.deb -delete
 OK

[/tmp/netdata-kickstart-X70OXCYHSn]# env apt-get install /tmp/netdata-kickstart-X70OXCYHSn/netdata-repo_2-2+debian12_all.deb
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Note, selecting 'netdata-repo' instead of '/tmp/netdata-kickstart-X70OXCYHSn/netdata-repo_2-2+debian12_all.deb'
The following NEW packages will be installed:
  netdata-repo
0 upgraded, 1 newly installed, 0 to remove and 7 not upgraded.
Need to get 0 B/4,098 B of archives.
After this operation, 18.4 kB of additional disk space will be used.
Get:1 /tmp/netdata-kickstart-X70OXCYHSn/netdata-repo_2-2+debian12_all.deb netdata-repo all 2-2 [4,098 B]
Selecting previously unselected package netdata-repo.
(Reading database ... 239838 files and directories currently installed.)
Preparing to unpack .../netdata-repo_2-2+debian12_all.deb ...
Unpacking netdata-repo (2-2) ...
Setting up netdata-repo (2-2) ...
N: Download is performed unsandboxed as root as file '/tmp/netdata-kickstart-X70OXCYHSn/netdata-repo_2-2+debian12_all.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
 OK

[/tmp/netdata-kickstart-X70OXCYHSn]# env apt-get update
Hit:1 http://security.debian.org bookworm-security InRelease
Hit:2 http://ftp.us.debian.org/debian bookworm InRelease
Hit:3 https://download.docker.com/linux/debian bookworm InRelease
Hit:4 http://ftp.us.debian.org/debian bookworm-backports InRelease
Hit:5 http://download.proxmox.com/debian/pve bookworm InRelease
Hit:6 http://apt.puppet.com bullseye InRelease
Get:7 http://repo.netdata.cloud/repos/stable/debian bookworm/ InRelease [1,302 B]
Hit:8 http://apt.puppetlabs.com bullseye InRelease
Get:9 http://repo.netdata.cloud/repos/repoconfig/debian bookworm/ InRelease [1,287 B]
Get:10 http://repo.netdata.cloud/repos/stable/debian bookworm/ Packages [117 kB]
Get:11 http://repo.netdata.cloud/repos/repoconfig/debian bookworm/ Packages [956 B]
Fetched 120 kB in 1s (90.5 kB/s)
Reading package lists... Done
 OK

[/tmp/netdata-kickstart-X70OXCYHSn]# env apt-get install netdata
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
  netdata-core netdata-plugins-bash netdata-plugins-python netdata-web
Suggested packages:
  apcupsd iw nc fping python3-psycopg2 python3-pymysql
The following NEW packages will be installed:
  netdata netdata-core netdata-plugins-bash netdata-plugins-python netdata-web
0 upgraded, 5 newly installed, 0 to remove and 7 not upgraded.
Need to get 10.0 MB of archives.
After this operation, 38.2 MB of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://ftp.us.debian.org/debian bookworm/main amd64 netdata-core amd64 1.37.1-2 [1,553 kB]
Get:2 http://ftp.us.debian.org/debian bookworm/main amd64 netdata-plugins-bash all 1.37.1-2 [753 kB]
Get:3 http://ftp.us.debian.org/debian bookworm/main amd64 netdata-web all 1.37.1-2 [7,563 kB]
Get:4 http://ftp.us.debian.org/debian bookworm/main amd64 netdata all 1.37.1-2 [23.9 kB]
Get:5 http://ftp.us.debian.org/debian bookworm/main amd64 netdata-plugins-python all 1.37.1-2 [141 kB]
Fetched 10.0 MB in 0s (33.9 MB/s)
Selecting previously unselected package netdata-core.
(Reading database ... 239844 files and directories currently installed.)
Preparing to unpack .../netdata-core_1.37.1-2_amd64.deb ...
Unpacking netdata-core (1.37.1-2) ...
Selecting previously unselected package netdata-plugins-bash.
Preparing to unpack .../netdata-plugins-bash_1.37.1-2_all.deb ...
Unpacking netdata-plugins-bash (1.37.1-2) ...
Selecting previously unselected package netdata-web.
Preparing to unpack .../netdata-web_1.37.1-2_all.deb ...
Unpacking netdata-web (1.37.1-2) ...
Selecting previously unselected package netdata.
Preparing to unpack .../netdata_1.37.1-2_all.deb ...
Unpacking netdata (1.37.1-2) ...
Selecting previously unselected package netdata-plugins-python.
Preparing to unpack .../netdata-plugins-python_1.37.1-2_all.deb ...
Unpacking netdata-plugins-python (1.37.1-2) ...
Setting up netdata-core (1.37.1-2) ...
Created symlink /etc/systemd/system/multi-user.target.wants/netdata.service → /lib/systemd/system/netdata.service.
Setting up netdata-plugins-bash (1.37.1-2) ...
Setting up netdata-plugins-python (1.37.1-2) ...
Setting up netdata-web (1.37.1-2) ...
Setting up netdata (1.37.1-2) ...
Processing triggers for man-db (2.11.2-2) ...
 OK

 --- Attempting to claim agent to https://app.netdata.cloud ---
3826424
3826428
[/tmp/netdata-kickstart-X70OXCYHSn]# /usr/sbin/netdata-claim.sh -token=<token> -rooms=<room> -url=https://app.netdata.cloud
This agent was built with --disable-cloud and cannot be claimed
 FAILED

 WARNING  Unable to claim node due to missing dependencies. Usually this means that the Netdata Agent was built without support for Netdata Cloud. If you built the agent from source, please install all needed dependencies for Cloud support. If you used the regular installation script and see this error, please file a bug report at https://github.com/netdata/netdata/issues/new/choose.

[/tmp/netdata-kickstart-X70OXCYHSn]# test -x //usr/libexec/netdata/netdata-updater.sh
 FAILED

[/tmp/netdata-kickstart-X70OXCYHSn]# test -x //netdata/usr/libexec/netdata/netdata-updater.sh
 FAILED

 WARNING  Could not find netdata-updater.sh. This means that auto-updates cannot (currently) be enabled on this system. See https://learn.netdata.cloud/docs/agent/packaging/installer/update for more information about updating Netdata.

Successfully installed the Netdata Agent.

The following non-fatal warnings or errors were encountered:

  - Command "/usr/sbin/netdata-claim.sh -token=<token> -rooms=<room> -url=https://app.netdata.cloud" failed with exit code 3.
  - Unable to claim node due to missing dependencies. Usually this means that the Netdata Agent was built without support for Netdata Cloud. If you built the agent from source, please install all needed dependencies for Cloud support. If you used the regular installation script and see this error, please file a bug report at https://github.com/netdata/netdata/issues/new/choose.
  - Command "test -x //usr/libexec/netdata/netdata-updater.sh" failed with exit code 1.
  - Command "test -x //netdata/usr/libexec/netdata/netdata-updater.sh" failed with exit code 1.
  - Could not find netdata-updater.sh. This means that auto-updates cannot (currently) be enabled on this system. See https://learn.netdata.cloud/docs/agent/packaging/installer/update for more information about updating Netdata.

To view your system's real-time performance metrics, open your web browser and enter http://NODE:19999.
Replace NODE with the IP address or hostname of your Netdata server to access the dashboard.

Official documentation can be found online at https://learn.netdata.cloud/docs/.

Looking to monitor all of your infrastructure with Netdata? Check out Netdata Cloud at https://app.netdata.cloud.

Join our community and connect with us on:
  - GitHub: https://github.com/netdata/netdata/discussions
  - Discord: https://discord.gg/5ygS846fR6
  - Our community forums: https://community.netdata.cloud/
[/root]# rm -rf /tmp/netdata-kickstart-X70OXCYHSn
 OK

The first sign of trouble is: N: Download is performed unsandboxed as root as file '/tmp/netdata-kickstart-X70OXCYHSn/netdata-repo_2-2+debian12_all.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)

[tkatsoulas]

This step

N: Download is performed unsandboxed as root as file '/tmp/netdata-kickstart-X70OXCYHSn/netdata-repo_2-2+debian12_all.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
 OK

of kickstart failed silently. So you ended up with a netdata package from Debian repos.

Let's see if this was a transient error for you or it's a consistent error.

1. Remove netdata via the package manager.
2. Make sure that any apt process is not stucked in the backgrounf
3. Run the kickstart again with the option --repositories-only and if you want the release channel https://learn.netdata.cloud/docs/installing/one-line-installer-for-all-linux-systems#release-channel

At any case you bumped into a bug, we need to catch this case and fall back or exit

[Clete2]

Here's what I did:

1. Remove netdata and all other related packages via apt remove and apt autoremove
2. Ran kickstart again with --repositories-only but it failed transiently again:

 ⚡  ~  wget -O /tmp/netdata-kickstart.sh https://get.netdata.cloud/kickstart.sh && sh /tmp/netdata-kickstart.sh --stable-channel --claim-token <token> --claim-rooms <room> --claim-url https://app.netdata.cloud --repositories-only
--2024-02-09 07:04:17--  https://get.netdata.cloud/kickstart.sh
Resolving get.netdata.cloud (get.netdata.cloud)... 104.26.9.141, 104.26.8.141, 172.67.72.170, ...
Connecting to get.netdata.cloud (get.netdata.cloud)|104.26.9.141|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 88187 (86K) [application/octet-stream]
Saving to: ‘/tmp/netdata-kickstart.sh’

/tmp/netdata-kickstart.sh                     100%[==============================================================================================>]  86.12K  --.-KB/s    in 0.004s

2024-02-09 07:04:17 (22.1 MB/s) - ‘/tmp/netdata-kickstart.sh’ saved [88187/88187]


 --- Using /tmp/netdata-kickstart-WZNhCDBLYV as a temporary directory. ---
 --- Checking for existing installations of Netdata... ---
 --- No existing installations of netdata found, assuming this is a fresh install. ---
 --- Attempting to install using native packages... ---
 --- Checking for availability of repository configuration package. ---
[/tmp/netdata-kickstart-WZNhCDBLYV]# /usr/bin/curl --fail -q -sSL --connect-timeout 10 --retry 3 --output /tmp/netdata-kickstart-WZNhCDBLYV/netdata-repo_2-2+debian12_all.deb https://repo.netdata.cloud/repos/repoconfig/debian/bookworm/netdata-repo_2-2+debian12_all.deb
 OK

[/tmp/netdata-kickstart-WZNhCDBLYV]# env apt-get update
Hit:1 http://security.debian.org bookworm-security InRelease
Get:2 https://download.docker.com/linux/debian bookworm InRelease [43.3 kB]
Hit:3 http://repo.netdata.cloud/repos/stable/debian bookworm/ InRelease
Hit:4 http://download.proxmox.com/debian/pve bookworm InRelease
Hit:5 http://repo.netdata.cloud/repos/repoconfig/debian bookworm/ InRelease
Hit:6 http://ftp.us.debian.org/debian bookworm InRelease
Get:7 http://ftp.us.debian.org/debian bookworm-backports InRelease [56.5 kB]
Get:8 http://apt.puppetlabs.com bullseye InRelease [83.7 kB]
Get:9 http://apt.puppet.com bullseye InRelease [83.7 kB]
Get:10 http://apt.puppetlabs.com bullseye/puppet7 amd64 Packages [177 kB]
Get:11 http://apt.puppetlabs.com bullseye/puppet7 all Packages [12.0 kB]
Get:12 http://apt.puppet.com bullseye/puppet7 all Packages [12.0 kB]
Get:13 http://apt.puppet.com bullseye/puppet7 amd64 Packages [177 kB]
Fetched 645 kB in 1s (439 kB/s)
Reading package lists... Done
 OK

[/tmp/netdata-kickstart-WZNhCDBLYV]# find /var/cache/apt/archives -type f -name netdata*.deb -delete
 OK

[/tmp/netdata-kickstart-WZNhCDBLYV]# env apt-get install /tmp/netdata-kickstart-WZNhCDBLYV/netdata-repo_2-2+debian12_all.deb
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Note, selecting 'netdata-repo' instead of '/tmp/netdata-kickstart-WZNhCDBLYV/netdata-repo_2-2+debian12_all.deb'
The following NEW packages will be installed:
  netdata-repo
0 upgraded, 1 newly installed, 0 to remove and 8 not upgraded.
Need to get 4,098 B of archives.
After this operation, 18.4 kB of additional disk space will be used.
Get:1 http://repo.netdata.cloud/repos/stable/debian bookworm/ netdata-repo 2-2 [4,098 B]
Fetched 4,098 B in 0s (56.5 kB/s)
Selecting previously unselected package netdata-repo.
(Reading database ... 239850 files and directories currently installed.)
Preparing to unpack .../netdata-repo_2-2_all.deb ...
Unpacking netdata-repo (2-2) ...
Setting up netdata-repo (2-2) ...
W: Sources disagree on hashes for supposedly identical version '2-2' of 'netdata-repo:amd64'.
 OK

[/tmp/netdata-kickstart-WZNhCDBLYV]# env apt-get update
Hit:1 http://security.debian.org bookworm-security InRelease
Hit:2 http://repo.netdata.cloud/repos/stable/debian bookworm/ InRelease
Hit:3 http://ftp.us.debian.org/debian bookworm InRelease
Get:4 https://download.docker.com/linux/debian bookworm InRelease [43.3 kB]
Hit:5 http://download.proxmox.com/debian/pve bookworm InRelease
Hit:6 http://ftp.us.debian.org/debian bookworm-backports InRelease
Hit:7 http://repo.netdata.cloud/repos/repoconfig/debian bookworm/ InRelease
Hit:8 http://apt.puppetlabs.com bullseye InRelease
Hit:9 http://apt.puppet.com bullseye InRelease
Fetched 43.3 kB in 1s (36.8 kB/s)
Reading package lists... Done
 OK

 --- Successfully installed repository configuraion package. ---
[/root]# rm -rf /tmp/netdata-kickstart-WZNhCDBLYV
 OK

I thought the transient error was strange: W: Sources disagree on hashes for supposedly identical version '2-2' of 'netdata-repo:amd64'.

3. Removed netdata-repo again
4. Removed /etc/apt/sources.list.d/netdata.list
5. Ran apt update to ensure netdata is not in the sources list
6. Double checked apt list --installed | grep netdata is empty
7. Ran script with repo only again:

 ⚡  ~  wget -O /tmp/netdata-kickstart.sh https://get.netdata.cloud/kickstart.sh && sh /tmp/netdata-kickstart.sh --stable-channel --claim-token <token> --claim-rooms <claim> --claim-url https://app.netdata.cloud --repositories-only
--2024-02-09 07:05:45--  https://get.netdata.cloud/kickstart.sh
Resolving get.netdata.cloud (get.netdata.cloud)... 104.26.9.141, 104.26.8.141, 172.67.72.170, ...
Connecting to get.netdata.cloud (get.netdata.cloud)|104.26.9.141|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 88187 (86K) [application/octet-stream]
Saving to: ‘/tmp/netdata-kickstart.sh’

/tmp/netdata-kickstart.sh                     100%[==============================================================================================>]  86.12K  --.-KB/s    in 0.007s

2024-02-09 07:05:45 (12.4 MB/s) - ‘/tmp/netdata-kickstart.sh’ saved [88187/88187]


 --- Using /tmp/netdata-kickstart-nInKduoT4g as a temporary directory. ---
 --- Checking for existing installations of Netdata... ---
 --- No existing installations of netdata found, assuming this is a fresh install. ---
 --- Attempting to install using native packages... ---
 --- Checking for availability of repository configuration package. ---
[/tmp/netdata-kickstart-nInKduoT4g]# /usr/bin/curl --fail -q -sSL --connect-timeout 10 --retry 3 --output /tmp/netdata-kickstart-nInKduoT4g/netdata-repo_2-2+debian12_all.deb https://repo.netdata.cloud/repos/repoconfig/debian/bookworm/netdata-repo_2-2+debian12_all.deb
 OK

[/tmp/netdata-kickstart-nInKduoT4g]# env apt-get update
Hit:1 http://ftp.us.debian.org/debian bookworm InRelease
Get:2 https://download.docker.com/linux/debian bookworm InRelease [43.3 kB]
Hit:3 http://security.debian.org bookworm-security InRelease
Hit:4 http://ftp.us.debian.org/debian bookworm-backports InRelease
Hit:5 http://download.proxmox.com/debian/pve bookworm InRelease
Hit:6 http://apt.puppetlabs.com bullseye InRelease
Hit:7 http://apt.puppet.com bullseye InRelease
Fetched 43.3 kB in 1s (45.9 kB/s)
Reading package lists... Done
 OK

[/tmp/netdata-kickstart-nInKduoT4g]# find /var/cache/apt/archives -type f -name netdata*.deb -delete
 OK

[/tmp/netdata-kickstart-nInKduoT4g]# env apt-get install /tmp/netdata-kickstart-nInKduoT4g/netdata-repo_2-2+debian12_all.deb
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Note, selecting 'netdata-repo' instead of '/tmp/netdata-kickstart-nInKduoT4g/netdata-repo_2-2+debian12_all.deb'
The following NEW packages will be installed:
  netdata-repo
0 upgraded, 1 newly installed, 0 to remove and 8 not upgraded.
Need to get 0 B/4,098 B of archives.
After this operation, 18.4 kB of additional disk space will be used.
Get:1 /tmp/netdata-kickstart-nInKduoT4g/netdata-repo_2-2+debian12_all.deb netdata-repo all 2-2 [4,098 B]
Selecting previously unselected package netdata-repo.
(Reading database ... 239850 files and directories currently installed.)
Preparing to unpack .../netdata-repo_2-2+debian12_all.deb ...
Unpacking netdata-repo (2-2) ...
Setting up netdata-repo (2-2) ...
N: Download is performed unsandboxed as root as file '/tmp/netdata-kickstart-nInKduoT4g/netdata-repo_2-2+debian12_all.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
 OK

[/tmp/netdata-kickstart-nInKduoT4g]# env apt-get update
Hit:1 http://security.debian.org bookworm-security InRelease
Get:2 https://download.docker.com/linux/debian bookworm InRelease [43.3 kB]
Hit:3 http://ftp.us.debian.org/debian bookworm InRelease
Hit:4 http://ftp.us.debian.org/debian bookworm-backports InRelease
Hit:5 http://download.proxmox.com/debian/pve bookworm InRelease
Hit:6 http://apt.puppet.com bullseye InRelease
Hit:7 http://apt.puppetlabs.com bullseye InRelease
Fetched 43.3 kB in 1s (46.6 kB/s)
Reading package lists... Done
 OK

 --- Successfully installed repository configuraion package. ---
[/root]# rm -rf /tmp/netdata-kickstart-nInKduoT4g
 OK

Again I encounter this issue: N: Download is performed unsandboxed as root as file '/tmp/netdata-kickstart-nInKduoT4g/netdata-repo_2-2+debian12_all.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)

Edit: I also have a second Proxmox host which has a similar configuration, and it has the exact same error.

Any advice?

[tkatsoulas]

Sorry for the delay, I asked @Ferroin to check your ticket. In the meantime some WAs that might help you

1. Provide an alternative temp dir TMPDIR (https://learn.netdata.cloud/docs/installing/one-line-installer-for-all-linux-systems#environment-variables)
2. Install static builds

[Clete2]

@tkatsoulas static build install worked. Alternate temp dir erred with the same issue (except in a different directory).

Of note, I ran into this issue where it tried to create an init.d file: #2148 after removing that file, I found systemctl enable netdata worked.

[ilyam8]

just a note: static build has no systemd-journal plugin.