Looking at the statfs man page, it suggests that this error would happen if it is lacking "search" permission (the execute bit) on any of the enclosing directories.
I would recommend giving +rx on all directories in that path (/pg-data, /pg-data/postgresql, /pg-data/postgresql/12 and so on) – either to all (a+rx) or the group that owns them and add the node exporter to that group. I think this is not a security issue because it allows anyone / that group to `ls -l` the directories but not to access the files within, unless those files' permissions are way too wide. /MR On Mon, Nov 16, 2020 at 1:54 PM 'NAGARJUNA D.N' via Prometheus Users < prometheus-users@googlegroups.com> wrote: > Hi, > > I have an FS mounted for PostgreSQL WAL logs which have limited > permissions. > > Where the disk usage not reported to Prometheus and am getting the > following error. > *Nov 14 18:22:30 timescale-masterdb node_exporter[7368]: level=debug > ts=2020-11-14T12:52:30.707Z caller=filesystem_linux.go:94 > collector=filesystem msg="Error on statfs() system call" > rootfs=/pg-data/postgresql/12/main/pg_wal err="permission denied"* > > Kindly suggest what permission I have to give for node_exporter users > without affecting postgres. > > Thanks > > > This communication is for informational purposes only. Any comments or > statements made herein do not necessarily reflect those of Blue Pi > Consulting India Private Limited, its subsidiaries and affiliates. This > transmission may contain information that is privileged, confidential, > legally privileged, and/or exempt from disclosure under applicable law. If > you are not the intended recipient, you are hereby notified that any > disclosure, copying, distribution, or use of the information contained > herein (including any reliance thereon) is STRICTLY PROHIBITED. Although > this transmission and any attachments are believed to be free of any virus > or other defect that might affect any computer system into which it is > received and opened, it is the responsibility of the recipient to ensure > that it is virus free and no responsibility is accepted by Blue Pi > Consulting India Private Limited, its subsidiaries and affiliates, as > applicable, for any loss or damage arising in any way from its use. If you > received this transmission in error, please immediately contact the sender > and destroy the material in its entirety, whether in electronic or hard > copy format. Thank you. > > -- > You received this message because you are subscribed to the Google Groups > "Prometheus Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to prometheus-users+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/prometheus-users/9293ba11-a9f0-4a5f-ba78-ce15ce10d1e6n%40googlegroups.com > <https://groups.google.com/d/msgid/prometheus-users/9293ba11-a9f0-4a5f-ba78-ce15ce10d1e6n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/CAMV%3D_gYjUfXScykjYmvjKYbTRNuC3S3Gxx5V%3DSj7Xy8TmYDq%2BQ%40mail.gmail.com.
