You are not logged in.

#1 2012-09-25 08:45:47

jancici
Member
From: svk
Registered: 2011-12-04
Posts: 190

syslog-ng is not starting

hi

I am running arch on virtula server over OpenVZ.

syslog-ng has problem to start at boot.
so I am trying to start it from console.

here is output from consolve

root@wizo ~ ### /etc/rc.d/syslog-ng restart
:: Stopping Syslog-NG                [DONE] 
:: Starting Syslog-NG                 [BUSY] syslog-ng: Error setting capabilities, capability management disabled; error='Operation not permitted'
eventfd: Invalid argument

trying find solution with google, but I did not find solution just for my problem.
also did try to find here on the forum ...

thanks for help / tips

Offline

#2 2012-09-25 08:47:51

nTia89
Banned
From: varese, italy
Registered: 2008-12-22
Posts: 1,230

Re: syslog-ng is not starting

post some logs....


+pc: custom | AMD Opteron 175 | nForce4 Ultra | 2GB ram DDR400 | nVidia 9800GT 1GB | ArchLinux x86_64 w/ openbox
+laptop: Apple | MacBook (2,1) | 2GB ram | Mac OS X 10.4 -> DIED
+ultrabook: Dell | XPS 13 (9343) | 8GB ram | 256GB ssd | FullHD display | Windows 8.1 64bit ArchLinux x86_64 w/ Gnome

Offline

#3 2012-09-25 09:07:37

jancici
Member
From: svk
Registered: 2011-12-04
Posts: 190

Re: syslog-ng is not starting

what you mean logs?
I did find out that syslog is not running 4 days, so nobody is  creating any new log from that time.

Last edited by jancici (2012-09-25 09:17:46)

Offline

#4 2012-09-25 09:29:20

jancici
Member
From: svk
Registered: 2011-12-04
Posts: 190

Re: syslog-ng is not starting

I did also follow this https://bugs.archlinux.org/task/29038
but not help

so trying to run in from console

syslog-ng --no-caps
eventfd: Invalid argument

then this

strace syslog-ng --no-caps -s
...

...

...

socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 5
connect(5, {sa_family=AF_FILE, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(5)                                = 0
open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 5
fstat(5, {st_mode=S_IFREG|0644, st_size=223, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2b28e4ac6000
read(5, "# Begin /etc/nsswitch.conf\n\npass"..., 4096) = 223
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0x2b28e4ac6000, 4096)            = 0
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 5
fstat(5, {st_mode=S_IFREG|0644, st_size=22197, ...}) = 0
mmap(NULL, 22197, PROT_READ, MAP_PRIVATE, 5, 0) = 0x2b28e4ac6000
close(5)                                = 0
open("/lib/libnss_files.so.2", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\"\0\0\0\0\0\0"..., 832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=52168, ...}) = 0
mmap(NULL, 2148176, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x2b28e4acc000
mprotect(0x2b28e4ad8000, 2093056, PROT_NONE) = 0
mmap(0x2b28e4cd7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xb000) = 0x2b28e4cd7000
close(5)                                = 0
mprotect(0x2b28e4cd7000, 4096, PROT_READ) = 0
munmap(0x2b28e4ac6000, 22197)           = 0
open("/etc/group", O_RDONLY|O_CLOEXEC)  = 5
fcntl(5, F_GETFD)                       = 0x1 (flags FD_CLOEXEC)
fstat(5, {st_mode=S_IFREG|0644, st_size=542, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2b28e4ac6000
read(5, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 542
close(5)                                = 0
munmap(0x2b28e4ac6000, 4096)            = 0
brk(0x8187000)                          = 0x8187000
read(4, "", 4096)                       = 0
ioctl(4, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, 0x7fffb1c024d0) = -1 ENOTTY (Inappropriate ioctl for device)
close(4)                                = 0
munmap(0x2b28e0de7000, 4096)            = 0
exit_group(0)                           = ?
+++ exited with 0 +++

Offline

#5 2012-09-25 10:56:45

nTia89
Banned
From: varese, italy
Registered: 2008-12-22
Posts: 1,230

Re: syslog-ng is not starting

is it the first daemon in the DAEMONS array?


+pc: custom | AMD Opteron 175 | nForce4 Ultra | 2GB ram DDR400 | nVidia 9800GT 1GB | ArchLinux x86_64 w/ openbox
+laptop: Apple | MacBook (2,1) | 2GB ram | Mac OS X 10.4 -> DIED
+ultrabook: Dell | XPS 13 (9343) | 8GB ram | 256GB ssd | FullHD display | Windows 8.1 64bit ArchLinux x86_64 w/ Gnome

Offline

#6 2012-09-25 12:01:02

jancici
Member
From: svk
Registered: 2011-12-04
Posts: 190

Re: syslog-ng is not starting

yes, it is first

DAEMONS=(syslog-ng iptables network @crond @sshd mysqld @httpd @dovecot postfix)

Offline

#7 2012-09-26 09:37:25

jancici
Member
From: svk
Registered: 2011-12-04
Posts: 190

Re: syslog-ng is not starting

problem still remain

if I am running syslog from console, the there is shorter error message

syslog-ng --no-caps
eventfd: Invalid argument

any idea what that mean?




I am did not migrate to systemd my server, but I did migrate my desktop so I don;t know to compare who is starting syslog-ng
this is from server

ps axf
  PID TTY      STAT   TIME COMMAND
    1 ?        Ss     0:01 init [3]      
 1098 ?        Ss     0:00 /usr/lib/systemd/systemd-udevd --daemon
 1205 ?        S      0:00 supervising syslog-ng        
 1206 ?        Ss     0:00  \_ /usr/sbin/syslog-ng --no-caps
 1414 ?        Ss     0:00 /usr/sbin/crond -S -l info

is it correct?


thanks

Offline

#8 2012-09-26 12:01:57

jancici
Member
From: svk
Registered: 2011-12-04
Posts: 190

Re: syslog-ng is not starting

I did downgrade syslog-ng to 3.3.5-2  and I could start it.
Syslog-ng is sarting after boot, but I had to keep parameter --co-caps in config.

I will stay with older version to see if there is not another problem.

Offline

#9 2012-10-09 13:55:51

Arhat
Member
Registered: 2010-07-02
Posts: 49
Website

Re: syslog-ng is not starting

I've encountered the same situation on my intovps virtual server.

syslog-ng-3.3.6-1 refused to start giving me the same error message as quoted by by jancici.

Downgrading to syslog-ng to 3.3.5-2 worked for me.

Any other intovps users that can verify this and is there a workaround (other than downgrading)?

Offline

#10 2012-10-14 00:00:13

vostok4
Member
Registered: 2010-12-16
Posts: 70

Re: syslog-ng is not starting

I had the exact same issue, a downgrade is all that fixed it for me (this actually caused some weird issues on my system when syslog wouldn't run).

Not sure what happened, what changed, but I'm guessing it has to do with the eventfd call on OpenVZ.

Offline

#11 2012-10-14 06:47:42

Arhat
Member
Registered: 2010-07-02
Posts: 49
Website

Re: syslog-ng is not starting

vostok4 wrote:

I had the exact same issue, a downgrade is all that fixed it for me (this actually caused some weird issues on my system when syslog wouldn't run).

Not sure what happened, what changed, but I'm guessing it has to do with the eventfd call on OpenVZ.

Yes, I had weird issues as well:

  • Even though courier was running and accepting connections no emails were accepted.

  • A little while after restarting (perhaps 5 mins) it was impossible to log into the box. (timeout)

  • deleting a user failed (userdel just kept on running indefinitely)

Debugging proved  difficult as no logs were being written.

Offline

#12 2012-10-14 06:55:31

vostok4
Member
Registered: 2010-12-16
Posts: 70

Re: syslog-ng is not starting

A little while after restarting (perhaps 5 mins) it was impossible to log into the box. (timeout)

exactly something i had smile that's what got me digging.

Offline

#13 2012-12-11 08:47:59

Arhat
Member
Registered: 2010-07-02
Posts: 49
Website

Re: syslog-ng is not starting

I took this problem upstream and the maintainer of the ivykis library,  Lennert Buytenhek,
released a patch yesterday which will fix this.

https://sourceforge.net/projects/libivykis/files/
https://github.com/buytenh/ivykis
git://github.com/buytenh/ivykis.git

I'm going to test the fix and report back.


/edit 20121212

I've successfully build a new syslog-ng-3.3.6  package using the ivykis fix and tested it on my intovps virtual server: It's working now.

My issue is resolved.

Last edited by Arhat (2012-12-12 14:05:15)

Offline

Board footer

Powered by FluxBB