Bug#1002738: redis-server: Default systemd unit file system protection settings prevent writing of logfiles, crashing redis

2022-01-28 Thread Johannes Bülow
Hello Chris, Downstream didn't really do anything so far on this topic. I also can only reproduce this issue on Kernel 5.15 and higher. I don't know whether setting / as ReadOnly directly or using ProtectSystem=strict along with PrivateDevices=true, ProtectKernelTunables=true and

Bug#1002738: Info received (Bug#1002738: redis-server: Default systemd unit file system protection settings prevent writing of logfiles, crashing redis)

2022-01-02 Thread Chris Lamb
Hi Johannes, > TLDR, if you want, feel free to close this ticket, I'll reopen it if > something changes downstream. Thanks for your mail. I'm happy to keep this bug open in case something comes up, but I'm not sure what I would do if we could definitively demonstrate a bug in Redis' unit file.

Bug#1002738: Info received (Bug#1002738: redis-server: Default systemd unit file system protection settings prevent writing of logfiles, crashing redis)

2022-01-02 Thread Johannes Bülow
Hello, These Problems could theoretically come from other settings, yes. I did use Bullseye for testing this, I don't have any other Debian systems currently (if you want, I can test it in bookworm or buster through). If you want, you can close this Bug Report if you feel this is a weird

Bug#1002738: redis-server: Default systemd unit file system protection settings prevent writing of logfiles, crashing redis

2021-12-29 Thread Chris Lamb
Hi, >> Ah, perhaps your version of systemd is newer?  > I am running systemd 247.3-6 on the affected systems, but Kernel > 5.15.8-1-default. On Kernel 5.14 and older it seems to work fine. [..] > My only guess is that it's some issue with (Kernel) namespaces either > on my System specifically or

Bug#1002738: redis-server: Default systemd unit file system protection settings prevent writing of logfiles, crashing redis

2021-12-29 Thread Johannes Bülow
On Tue, 2021-12-28 at 17:13 +, Chris Lamb wrote: > That's interesting, because there is a specific allowance made so > that > Redis can write to its own logfiles. Specifically: > >   ReadWriteDirectories=-/var/log/redis On my systems they are already ReadWritePaths, not ReadWriteDirectories

Bug#1002738: redis-server: Default systemd unit file system protection settings prevent writing of logfiles, crashing redis

2021-12-28 Thread Chris Lamb
Hi Johannes, > I therefore suspect the issue being with the write > restrictions in the default Systemd unit file for redis-server. It sounds like that to me too. However: > Dec 28 15:19:05 debian redis-server[521]: >>> > 'logfile/var/log/redis/redis-server.log' > Dec 28 15:19:05 debian

Bug#1002738: redis-server: Default systemd unit file system protection settings prevent writing of logfiles, crashing redis

2021-12-28 Thread Johannes Bülow
Package: redis-server Version: 5:6.0.15-1 Severity: normal Dear Maintainer, I installed openvas on my kali vm, but redis broke, so I tried to install redis-server on a clean debian instance, with the same result. If I disable System Protection and comment out all Read/Write stuff in the systemd