Bug 2081259

Summary:	sap_general_preconfigure leaves unneeded services enabled
Product:	Red Hat Enterprise Linux 8	Reporter:	Marko Myllynen <myllynen>
Component:	rhel-system-roles-sap	Assignee:	Than Ngo <than>
Status:	CLOSED WONTFIX	QA Contact:	Daniel Streit <dstreit>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.5	CC:	bfinger, jscheibe
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-08-17 12:11:40 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Marko Myllynen 2022-05-03 08:25:07 UTC

Description of problem:
sap_*_preconfigure roles install @server group and that brings in lots of additional services on minimal installations. It might be a good idea to disable some of the unneeded services even if many of them are no-op.

For instance, iscsi related services should be no-op but to make it explicit that no iscsi is in use those services could be disabled.

Perhaps slightly more importantly, disabling mlocate-updatedb.timer would prevent scanning all files and mounts once per day and thus potentially causing slight IO load/latency, although the unit should run on very low prio.

These are mere suggestion for potential tiny improvement, please feel free to accept or reject and close this BZ if not deemed worth the effort. Thanks.

Comment 1 Marko Myllynen 2022-05-04 13:09:54 UTC

FWIW, these might be candidates to disable but as said most of them should be no-op:

      - iscsid.socket
      - iscsi-onboot.service
      - iscsi.service
      - iscsiuio.socket
      - mdmonitor.service
      - mlocate-updatedb.timer
      - nfs-client.target
      - rpcbind.service
      - rpcbind.socket
      - sssd-kcm.socket
      - sssd.service
      - vdo.service

Comment 2 Than Ngo 2022-05-13 12:14:54 UTC

I am not sure if disabling such services can have negative consequences for SAP. Bernd has already mentioned in 2078423 that we are trying to bring the roles as far as possible in line with the applicable SAP notes.

@Bernd, what is your opinion on this?

Comment 3 Bernd Finger 2022-05-16 14:12:53 UTC

Disabling services is probably something we could mention in https://access.redhat.com/articles/6452131 after verifying that these services can indeed be disabled.

Comment 4 Than Ngo 2022-05-20 08:19:10 UTC

(In reply to Bernd Finger from comment #3)
> Disabling services is probably something we could mention in
> https://access.redhat.com/articles/6452131 after verifying that these
> services can indeed be disabled.

I suppose that it will take while to verify that these services can really be disabled.
Bernd, Is it worth fixing it? if so can we fix this problem in rhel-8.8 update?

Thank you!

Comment 5 Marko Myllynen 2022-05-20 08:32:08 UTC

Perhaps one additional thing worth mentioning is that if we would be one day able to install only @minimal-environment instead of @server that would largely reduce the number of installed/enabled service by itself. So in case that is something that might happen perhaps this could be checked after that. But if that's not possible then disabling at least mlocate-updatedb.timer might be warranted. But this is just a suggestion, I'll leave it up to you to do decide. Thanks.