From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 1B6FA1FF15C for ; Fri, 12 Dec 2025 16:38:20 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 4FE27AB45; Fri, 12 Dec 2025 16:39:00 +0100 (CET) From: Maximiliano Sandoval To: Dominik Rusovac In-Reply-To: <20251212130531.116019-1-d.rusovac@proxmox.com> (Dominik Rusovac's message of "Fri, 12 Dec 2025 14:05:31 +0100") References: <20251212130531.116019-1-d.rusovac@proxmox.com> User-Agent: mu4e 1.12.9; emacs 30.1 Date: Fri, 12 Dec 2025 16:38:56 +0100 Message-ID: MIME-Version: 1.0 X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1765553933132 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.093 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [mon.pm] Subject: Re: [pve-devel] [PATCH pve-manager] fix #7011: ceph monitor: set ownership of monitor logs X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox VE development discussion Cc: pve-devel@lists.proxmox.com Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" Dominik Rusovac writes: > Ownership of ceph logs is now set to ceph:ceph after the creation of a > new monitor and before the new monitor starts. Hence, effective ceph > monitor logging on freshly set up ceph clusters no longer depends on the > first upgrade of ceph-common. > > For setups (still) affected by #7011 it is required that ownership of > ceph logs is set to ceph:ceph (either manually or due to some > ceph-common upgrade), followed by a monitor restart. > > Signed-off-by: Dominik Rusovac > --- > PVE/API2/Ceph/MON.pm | 6 ++++++ > 1 file changed, 6 insertions(+) > > diff --git a/PVE/API2/Ceph/MON.pm b/PVE/API2/Ceph/MON.pm > index 70fc158d..047337ea 100644 > --- a/PVE/API2/Ceph/MON.pm > +++ b/PVE/API2/Ceph/MON.pm > @@ -428,6 +428,12 @@ __PACKAGE__->register_method({ > $mon_keyring, > ]); > run_command(['chown', 'ceph:ceph', '-R', $mondir]); > + > + eval { > + run_command('chown ceph:ceph /var/log/ceph'); > + run_command('chown ceph:ceph /var/log/ceph/*.log*'); > + }; > + warn "$@" if $@; > }; > my $err = $@; > unlink $monmap; When we call ceph-mon --mkfs a few lines above the file /var/log/ceph/ceph-mon.$monid.log gets created with owner root:ceph. I tried using --setuser=ceph instead, but that did not work out while this approach does work. It should be noted however that only the file mentioned above has the wrong owner and that the chown calls above are a bit too greedy, however this matches ceph-common post-install script better. Tested-by: Maximiliano Sandoval Reviewed-by: Maximiliano Sandoval -- Maximiliano _______________________________________________ pve-devel mailing list pve-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel