Tom,

On Wed, Nov 05, 2025 at 07:10:23PM +1100, Tom wrote:
> Insecure directory in $ENV{PATH} while running with -T switch at
> /usr/share/perl5/Debian/AdduserLogging.pm line 161.
> dpkg: error processing package openssh-client (--configure):
> installed openssh-client package post-installation script subprocess
> returned error exit status 25
> Processing triggers for libc-bin (2.41-12) ...
> Errors were encountered while processing:
> openssh-client
> Error: Sub-process /usr/bin/dpkg returned an error code (1)
>
> ---8<---
>
> I don't get this error when installing in the debian:trixie or
> devuan/devuan:daedalus images. My docker host is still running on daedalus.

I came across the same error yesterday in relation to Devuan's popcon receiver.
It appears to be due to a poorly documented change in perl's -T behaviour. Now

$ENV{PATH}=""

produces an error. See perlsec(1)

I fixed it with

$ENV{PATH}="/nonexistent"

It looks as if it needs reporting to Debian against adduser.

Mark