[IntelMQ-dev] Redis failing to start after intelmq* package update

[Birger Schacht]

Hi,

On 5/3/21 3:40 PM, Sebastian Wagner wrote:
> Hi,
> 
> On 5/3/21 3:25 PM, Mika Silander wrote:
>>   I'm afraid not much info here:
> But very strange.
>> root at ourhost:~# ls -la /var/log/redis/
>> total 12
>> drwxr-s---  2 redis   adm     4096 Apr  4 00:00 .
>> drwxrwxr-x 13 root    syslog  4096 May  1 00:00 ..
>> -rw-r--r--  1 intelmq intelmq    0 Apr  4 00:00 redis-server.log
>> -rw-rw----  1 redis   adm     2917 Mar 31 16:27 redis-server.log.1
>>
>>   However, the ownerships and permissions between the current log file 
and the (logrotated?) one
>> differ substantially. Could this be the reason?
> 
> Did you try? But I have no clue why intelmq is the owner of those files
> now. I see nothing relevant in our packaging scripts (postinst etc) and
> the logrotate configuration. Maybe Birger has an idea?

not really. The intelmq user should not even be able to read files in 
the /var/log/redis directory, much less create a file. The 
redis-server.log file is empty, so I would just delete it and try again, 
though it would be interesting to find out how the file got created with 
these ownership settings in the first place.

cheers,
Birger


> 
> Sebastian
> 
>> Br, Mika
>>
>> ----- Original Message -----
>> From: "Sebastian Wagner" <wagner at cert.at>
>> To: "Mika Silander" <mika.silander at csc.fi>, "intelmq-dev" <intelmq-dev at lists.cert.at>
>> Sent: Monday, 3 May, 2021 16:16:46
>> Subject: Re: [IntelMQ-dev] Redis failing to start after intelmq* package update
>>
>> Hi Mika,
>>
>> On 5/3/21 3:03 PM, Mika Silander wrote:
>>>   systemctl status redis.service indicates there's a problem starting 
redis:
>>>
>>> May 03 15:48:20 ourhost systemd[1]: Failed to start Advanced key-value store.
>>> May 03 15:48:20 ourhost systemd[1]: redis-server.service: Scheduled restart job, restart counter is at 5.
>>> May 03 15:48:20 ourhost systemd[1]: Stopped Advanced key-value store.
>>> May 03 15:48:20 ourhost systemd[1]: redis-server.service: Start request repeated too quickly.
>>> May 03 15:48:20 ourhost systemd[1]: redis-server.service: Failed with 
result 'exit-code'.
>>> May 03 15:48:20 ourhost systemd[1]: Failed to start Advanced key-value store.
>> Do redis' logs reveal anything useful?
>>
>> Sebastian
>>
>>
>> _______________________________________________
>> IntelMQ-dev mailing list
>> https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev
>> https://intelmq.readthedocs.io/

-- 
// Birger Schacht <schacht at cert.at>
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x3A3C547D2D48D997.asc
Type: application/pgp-keys
Size: 5392 bytes
Desc: OpenPGP public key
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20210504/3ee768e3/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20210504/3ee768e3/attachment-0001.sig>