Rsyslog imtcp issue

2014-09-24 Thread Jorge Niedbalski
Hello,

I am the maintainer of the rsyslog/forwarder charms. While i was
working implementing an option to expose the protocol/port used by
rsyslogd I noticed that
enabling TCP on rsyslogd using imtcp ($InputTCPServerRun 514) was not
possible on any machine deployed by Juju.

The root cause is that /etc/rsyslog.d/26-juju-unit-primary-0.conf
declares a DefaultNetStreamDriver to use gTLS, and apparently both
plain && tls sockets cannot live together on rsyslogd.

After changing the $DefaultNetstreamDriver from gtls to ptcp it worked
correctly, for both actions collecting logs via TCP 514 and forwarding
logs to 10.0.3.1:6514;LongTagForwardFormat.

I know is not an option to abandon the usage of gTLS, but ideally,
Juju should have a separated service and configuration path that
doesn't interrupts any other rsyslogd process running on the host. I
think we can workaround/fix this by running 2 different rsyslogd
services with different configurations (maybe a default path different
for juju /etc/rsyslog.d/juju/ ?),

Please any observation would be appreciated

Cheers.

-- 
Jorge Niedbalski R.
Software Sustaining Engineer @ Canonical
Canonical Technical Services Engineering Team
# Email: jorge.niedbal...@canonical.com (GPG:0x3DA28544)

-- 
Juju-dev mailing list
Juju-dev@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/juju-dev


Re: Rsyslog imtcp issue

2014-09-25 Thread Stuart Bishop
On 24 September 2014 23:25, Jorge Niedbalski
 wrote:

> I know is not an option to abandon the usage of gTLS, but ideally,
> Juju should have a separated service and configuration path that
> doesn't interrupts any other rsyslogd process running on the host. I
> think we can workaround/fix this by running 2 different rsyslogd
> services with different configurations (maybe a default path different
> for juju /etc/rsyslog.d/juju/ ?),
>
> Please any observation would be appreciated

I too had difficulty when I needed to implement the rsyslog interface
in my charm. I did not like that I needed to reconfigure a service
required for juju to function correctly, as I have no guarantees that
my changes will continue to work with future versions of juju (and for
a beginner, rsyslogd is certainly not fun or easy to configure).

If syslog remains, it would be nice if juju setup its own separate
daemon so I don't have to worry about taking the environment down by
accidentally spamming my logs at the controller node :)

-- 
Stuart Bishop 

-- 
Juju-dev mailing list
Juju-dev@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/juju-dev


Re: Rsyslog imtcp issue

2014-09-25 Thread Gabriel Samfira
FWIW, unit/machine agents no longer need rsyslog to stream logs to the 
state machine as of this merge:

https://github.com/juju/juju/pull/499

Removing rsyslog as a dependency should be safe I think...



On 25.09.2014 12:26, Stuart Bishop wrote:
> On 24 September 2014 23:25, Jorge Niedbalski
>  wrote:
>
>> I know is not an option to abandon the usage of gTLS, but ideally,
>> Juju should have a separated service and configuration path that
>> doesn't interrupts any other rsyslogd process running on the host. I
>> think we can workaround/fix this by running 2 different rsyslogd
>> services with different configurations (maybe a default path different
>> for juju /etc/rsyslog.d/juju/ ?),
>>
>> Please any observation would be appreciated
> I too had difficulty when I needed to implement the rsyslog interface
> in my charm. I did not like that I needed to reconfigure a service
> required for juju to function correctly, as I have no guarantees that
> my changes will continue to work with future versions of juju (and for
> a beginner, rsyslogd is certainly not fun or easy to configure).
>
> If syslog remains, it would be nice if juju setup its own separate
> daemon so I don't have to worry about taking the environment down by
> accidentally spamming my logs at the controller node :)
>

-- 
Juju-dev mailing list
Juju-dev@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/juju-dev


Re: Rsyslog imtcp issue

2014-09-29 Thread Jorge Niedbalski
Hello,
On Thu, Sep 25, 2014 at 7:28 AM, Gabriel Samfira
 wrote:
> FWIW, unit/machine agents no longer need rsyslog to stream logs to the
> state machine as of this merge:
>
> https://github.com/juju/juju/pull/499
>

Thank you for pointing out this.

> Removing rsyslog as a dependency should be safe I think...
>

Does anybody else could confirm that removal of rsyslog is OK?

>
>
> On 25.09.2014 12:26, Stuart Bishop wrote:
>> On 24 September 2014 23:25, Jorge Niedbalski
>>  wrote:
>>
>>> I know is not an option to abandon the usage of gTLS, but ideally,

Thanks.

-- 
Jorge Niedbalski R.
Software Sustaining Engineer @ Canonical
Canonical Technical Services.

-- 
Juju-dev mailing list
Juju-dev@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/juju-dev


Re: Rsyslog imtcp issue

2014-09-29 Thread Nate Finch
The state servers still use rsyslog, so you'd still have to be careful when
deploying the charm to a state server.  Probably it's best if we just fix
the juju code to use its own daemon so as not to collide with charms that
use it.  The unit machines don't need rsyslog... unless you decide to turn
one into a state machine using ensure-availability... so I don't think we
can just blindly assume it won't be there.


On Mon, Sep 29, 2014 at 10:29 AM, Jorge Niedbalski <
jorge.niedbal...@canonical.com> wrote:

> Hello,
> On Thu, Sep 25, 2014 at 7:28 AM, Gabriel Samfira
>  wrote:
> > FWIW, unit/machine agents no longer need rsyslog to stream logs to the
> > state machine as of this merge:
> >
> > https://github.com/juju/juju/pull/499
> >
>
> Thank you for pointing out this.
>
> > Removing rsyslog as a dependency should be safe I think...
> >
>
> Does anybody else could confirm that removal of rsyslog is OK?
>
> >
> >
> > On 25.09.2014 12:26, Stuart Bishop wrote:
> >> On 24 September 2014 23:25, Jorge Niedbalski
> >>  wrote:
> >>
> >>> I know is not an option to abandon the usage of gTLS, but ideally,
>
> Thanks.
>
> --
> Jorge Niedbalski R.
> Software Sustaining Engineer @ Canonical
> Canonical Technical Services.
>
> --
> Juju-dev mailing list
> Juju-dev@lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/juju-dev
>
-- 
Juju-dev mailing list
Juju-dev@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/juju-dev