Bug 1306050

Summary: "rhel-dmesg" systemd service unit is missing "ConditionVirtualization=!container"
Product: Red Hat Enterprise Linux 7 Reporter: Elias Probst <mail>
Component: initscriptsAssignee: initscripts Maintenance Team <initscripts-maint-list>
Status: CLOSED ERRATA QA Contact: Leos Pol <lpol>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.2CC: jscotka, lpol
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: initscripts-9.49.31-1.el7 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-04 06:43:42 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Elias Probst 2016-02-09 23:23:32 UTC
Description of problem:
Starting RHEL7/CentOS7 in a systemd-nspawn container results in rhel-dmesg.service failing to start:
systemd[1]: Starting Dump dmesg to /var/log/dmesg...
rhel-dmesg[36]: dmesg: read kernel buffer failed: Operation not permitted

The systemd service unit for rhel-dmesg.service needs to have the following line in the [Unit] section to prevent it from being started in container environments:

ConditionVirtualization=!container

Comment 5 Leos Pol 2016-08-23 13:54:36 UTC
I'm able to reproduce this issue on f24 host:
[root@guest ~]# rpm -q initscripts
initscripts-9.49.30-1.el7.x86_64
[root@guest ~]# systemctl status rhel-dmesg
● rhel-dmesg.service - Dump dmesg to /var/log/dmesg
   Loaded: loaded (/usr/lib/systemd/system/rhel-dmesg.service; disabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Tue 2016-08-23 09:46:09 EDT; 39s ago
  Process: 42 ExecStart=/usr/lib/systemd/rhel-dmesg (code=exited, status=1/FAILURE)
 Main PID: 42 (code=exited, status=1/FAILURE)

Aug 23 09:46:09 guest systemd[1]: Starting Dump dmesg to /var/log/dmesg...
Aug 23 09:46:09 guest rhel-dmesg[42]: dmesg: read kernel buffer failed: Operation not permitted
Aug 23 09:46:09 guest systemd[1]: rhel-dmesg.service: main process exited, code=exited, status=1/FAILURE
Aug 23 09:46:09 guest systemd[1]: Failed to start Dump dmesg to /var/log/dmesg.
Aug 23 09:46:09 guest systemd[1]: Unit rhel-dmesg.service entered failed state.
Aug 23 09:46:09 guest systemd[1]: rhel-dmesg.service failed.

On rhel7 host, looks all fine
[root@guest ~]# rpm -q initscripts
initscripts-9.49.30-1.el7.x86_64
[root@guest ~]# systemctl status rhel-dmesg
● rhel-dmesg.service - Dump dmesg to /var/log/dmesg
   Loaded: loaded (/usr/lib/systemd/system/rhel-dmesg.service; disabled; vendor preset: disabled)
   Active: active (exited) since Tue 2016-08-23 09:47:50 EDT; 23s ago
  Process: 48 ExecStart=/usr/lib/systemd/rhel-dmesg (code=exited, status=0/SUCCESS)
 Main PID: 48 (code=exited, status=0/SUCCESS)
   CGroup: /machine.slice/machine-guest.scope/system.slice/rhel-dmesg.service

Aug 23 09:47:50 guest systemd[1]: Starting Dump dmesg to /var/log/dmesg...
Aug 23 09:47:50 guest systemd[1]: Started Dump dmesg to /var/log/dmesg.

Using the latest initscripts on f24 host:
[root@guest ~]# rpm -q initscripts
initscripts-9.49.35-1.el7.x86_64
[root@guest ~]# systemctl status rhel-dmesg
● rhel-dmesg.service - Dump dmesg to /var/log/dmesg
   Loaded: loaded (/usr/lib/systemd/system/rhel-dmesg.service; disabled; vendor preset: disabled)
   Active: inactive (dead)
Condition: start condition failed at Tue 2016-08-23 09:52:22 EDT; 1min 28s ago
           ConditionVirtualization=!container was not met

Comment 7 errata-xmlrpc 2016-11-04 06:43:42 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-2456.html