From mboxrd@z Thu Jan 1 00:00:00 1970 From: Giovanni Biscuolo Subject: bug#37631: service zabbix-server (and zabbix-agent) fails starting (cannot run as root!) Date: Sat, 05 Oct 2019 14:49:58 +0200 Message-ID: <87lftzz79l.fsf@roquette.mug.biscuolo.net> References: <87pnjbzeh9.fsf@roquette.mug.biscuolo.net> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:54364) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iGjWb-0007uL-Pw for bug-guix@gnu.org; Sat, 05 Oct 2019 08:51:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iGjWX-0007AR-Or for bug-guix@gnu.org; Sat, 05 Oct 2019 08:51:05 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:35064) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1iGjWX-0007A6-Lp for bug-guix@gnu.org; Sat, 05 Oct 2019 08:51:01 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1iGjWX-0003B6-J4 for bug-guix@gnu.org; Sat, 05 Oct 2019 08:51:01 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Received: from eggs.gnu.org ([2001:470:142:3::10]:54194) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iGjVu-0007hz-Kl for bug-guix@gnu.org; Sat, 05 Oct 2019 08:50:25 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iGjVt-0006Kc-CP for bug-guix@gnu.org; Sat, 05 Oct 2019 08:50:22 -0400 Received: from ns13.heimat.it ([46.4.214.66]:39014) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1iGjVt-0006Id-6i for bug-guix@gnu.org; Sat, 05 Oct 2019 08:50:21 -0400 Received: from localhost (ip6-localhost [127.0.0.1]) by ns13.heimat.it (Postfix) with ESMTP id 961093000F8 for ; Sat, 5 Oct 2019 12:50:19 +0000 (UTC) Received: from ns13.heimat.it ([127.0.0.1]) by localhost (ns13.heimat.it [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p1gOWP5TQSpm for ; Sat, 5 Oct 2019 12:50:00 +0000 (UTC) Received: from bourrache.mug.xelera.it (unknown [93.56.161.211]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by ns13.heimat.it (Postfix) with ESMTPSA id 2D7ED3000D5 for ; Sat, 5 Oct 2019 12:50:00 +0000 (UTC) Received: from roquette.mug.biscuolo.net (roquette [10.38.2.14]) by bourrache.mug.xelera.it (Postfix) with SMTP id 29BC5300A4B for ; Sat, 5 Oct 2019 14:49:59 +0200 (CEST) In-Reply-To: <87pnjbzeh9.fsf@roquette.mug.biscuolo.net> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 37631@debbugs.gnu.org Giovanni Biscuolo writes: > executive summary: do we really need to start zabbix_server in > foreground mode? executive answer: I don't know **but** this is not the cause of my issue :) > --8<---------------cut here---------------start------------->8--- [...] > (service zabbix-server-service-type > (zabbix-server-configuration > (include-files '("/root/secrets/zabbix-server-dbpass")) > (log-type "file"))) ouch!... looking at the console (it's a remote VM so I usually connect via ssh only, but today I also connected via SPICE): --8<---------------cut here---------------start------------->8--- zabbix_server [1942]: /root/secrets/zabbix-server-dbpass: [13] Permission denied --8<---------------cut here---------------end--------------->8--- unfortunately shepherd did not catch this error (due to foreground mode?) in syslog :-( I just had to adjust the permissions to allow zabbix (I allowed the zabbix group to traverse /root/secrets and read the file) to read the included file this now works with both zabbix 4.2.0 and zabbix 4.2.7 [...] Thanks! Gio' -- Giovanni Biscuolo Xelera IT Infrastructures