From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?UTF-8?Q?G=C3=A1bor?= Boskovits Subject: bug#37631: service zabbix-server (and zabbix-agent) fails starting (cannot run as root!) Date: Sat, 5 Oct 2019 18:04:27 +0200 Message-ID: References: <87pnjbzeh9.fsf@roquette.mug.biscuolo.net> <87lftzz79l.fsf@roquette.mug.biscuolo.net> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="000000000000d05cd705942bf99f" Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:48069) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iGmYK-0002R6-6n for bug-guix@gnu.org; Sat, 05 Oct 2019 12:05:05 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iGmYI-0004iw-W0 for bug-guix@gnu.org; Sat, 05 Oct 2019 12:05:04 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:36239) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1iGmYI-0004ir-Om for bug-guix@gnu.org; Sat, 05 Oct 2019 12:05:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1iGmYI-0001je-IQ for bug-guix@gnu.org; Sat, 05 Oct 2019 12:05:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <87lftzz79l.fsf@roquette.mug.biscuolo.net> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Giovanni Biscuolo Cc: 37631@debbugs.gnu.org --000000000000d05cd705942bf99f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello Giovanni, Giovanni Biscuolo ezt =C3=ADrta (id=C5=91pont: 2019. okt. 5.,= Szo, 14:51): > Giovanni Biscuolo writes: > > > executive summary: do we really need to start zabbix_server in > > foreground mode? > > executive answer: I don't know **but** this is not the cause of my issue > :) > > > --8<---------------cut here---------------start------------->8--- > > [...] > > > (service zabbix-server-service-type > > (zabbix-server-configuration > > (include-files > '("/root/secrets/zabbix-server-dbpass")) > > (log-type "file"))) > > ouch!... looking at the console (it's a remote VM so I usually connect > via ssh only, but today I also connected via SPICE): > > --8<---------------cut here---------------start------------->8--- > zabbix_server [1942]: /root/secrets/zabbix-server-dbpass: [13] Permission > denied > --8<---------------cut here---------------end--------------->8--- > > unfortunately shepherd did not catch this error (due to foreground > mode?) in syslog :-( > > I just had to adjust the permissions to allow zabbix (I allowed the > zabbix group to traverse /root/secrets and read the file) to read the > included file > > this now works with both zabbix 4.2.0 and zabbix 4.2.7 > > [...] > > Thanks! Gio' > > -- > Giovanni Biscuolo > > Xelera IT Infrastructures > > > > Can we consider this resolved then? Best regards, g_bor --=20 OpenPGP Key Fingerprint: 7988:3B9F:7D6A:4DBF:3719:0367:2506:A96C:CF63:0B21 --000000000000d05cd705942bf99f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello Giovanni,

Giovanni Biscuolo &l= t;g@xelera.eu> ezt =C3=ADrta (id=C5= =91pont: 2019. okt. 5., Szo, 14:51):
Giovanni Biscuolo <g@xelera.eu> writes:

> executive summary: do we really need to start zabbix_server in
> foreground mode?

executive answer: I don't know **but** this is not the cause of my issu= e
:)

> --8<---------------cut here---------------start------------->8--= -

[...]

>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 (service zabbix-server-servic= e-type
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0(z= abbix-server-configuration
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 (= include-files '("/root/secrets/zabbix-server-dbpass"))
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 (= log-type "file")))

ouch!... looking at the console (it's a remote VM so I usually connect<= br> via ssh only, but today I also connected via SPICE):

--8<---------------cut here---------------start------------->8---
zabbix_server [1942]: /root/secrets/zabbix-server-dbpass: [13] Permission d= enied
--8<---------------cut here---------------end--------------->8---

unfortunately shepherd did not catch this error (due to foreground
mode?) in syslog :-(

I just had to adjust the permissions to allow zabbix (I allowed the
zabbix group to traverse /root/secrets and read the file) to read the
included file

this now works with both zabbix 4.2.0 and zabbix 4.2.7

[...]

Thanks! Gio'

--
Giovanni Biscuolo

Xelera IT Infrastructures



Can we consider this resolved then?

Best regards,
g_bor
--
OpenPGP Key Fingerprin= t: 7988:3B9F:7D6A:4DBF:3719:0367:2506:A96C:CF63:0B21
<= /div> --000000000000d05cd705942bf99f--