Bug 1658825

Summary: systemd-journal-remote configs define certificate and key paths that do not exist
Product: Red Hat Enterprise Linux 8 Reporter: Scott Poore <spoore>
Component: systemdAssignee: systemd-maint
Status: CLOSED NOTABUG QA Contact: qe-baseos-daemons
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.0CC: jsynacek, systemd-maint-list
Target Milestone: rc   
Target Release: 8.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-12-14 07:43:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Scott Poore 2018-12-12 23:08:19 UTC
Description of problem:

The /etc/systemd/journal-{remote,upload}.conf files (an the services) point to default paths that do not seem to exist on my test hosts:

# ls -ld /etc/ssl/private/
ls: cannot access '/etc/ssl/private/': No such file or directory


# ls -ld /etc/ssl/ca
ls: cannot access '/etc/ssl/ca': No such file or directory

These are defined as the locations like this:

# cat /etc/systemd/journal-remote.conf 
[Remote]
# Seal=false
# SplitMode=host
# ServerKeyFile=/etc/ssl/private/journal-remote.pem
# ServerCertificateFile=/etc/ssl/certs/journal-remote.pem
# TrustedCertificateFile=/etc/ssl/ca/trusted.pem

Version-Release number of selected component (if applicable):
systemd-journal-remote-239-8.el8.x86_64

How reproducible:
always

Steps to Reproduce:
1.  dnf -y install systemd-journal-remote
2.  if you try to install keys into the default locations, you must create the missing dirs.


Actual results:
dirs do not exist

Expected results:
dirs already exist or systemd-journal-remote points to new standard locations that do exist?

Additional info:
Or is this maybe a documentation issue?

Comment 1 Jan Synacek 2018-12-14 07:43:40 UTC
They are just examples. You can put the certificates wherever you like and then, of course, you have to adjust the configuration.