[PVE-User] Upgrade to PVE8, logcheck, error on journalctl...
Marco Gaiarin
gaio at lilliput.linux.it
Mon Aug 12 17:52:09 CEST 2024
I extensively use 'logcheck' on my servers.
I've just upgrade a server to PVE8 (a little test standalone server) and
logcheck start complain:
Logcheck failed: Your log entries may not have been checked.
Details:
Could not run journalctl or save output
To identify the cause you may wish to:
- Check temporary directory: /tmp/logcheck.N0YsPV
- verify that the logcheck user can read all
logfiles specified in;
/etc/logcheck/logcheck.logfiles
/etc/logcheck/logcheck.logfiled.d/*.logfiles
i've tried:
root at lisei:/etc/logcheck# su -s /bin/bash - logcheck
logcheck at lisei:~$ journalctl
No journal files were opened due to insufficient permissions.
but:
root at lisei:/etc/logcheck# id logcheck
uid=112(logcheck) gid=118(logcheck) groups=118(logcheck),4(adm)
so logcheck user seems have correct permission.
I've upgraded some plain debian VMs and containers to Bookworm, and i've not
hit troubles on logcheck. So seems something PVE specific...
Someone can help me? Thanks.
--
More information about the pve-user
mailing list