Red Hat Bugzilla – Bug 1303179
journalctl's logs verification fails and I never altered it
Last modified: 2016-01-29 15:41:56 EST
Description of problem:
journalctl's logs verification fails and I never altered it. Is this ok?
Version-Release number of selected component (if applicable):
+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN
Steps to Reproduce:
1. sudo journalctl --verify
Got a lot of "FAIL: File corruption detected at" messages.
All logs should pass. I never changed my logs in any way.
I never used this feature of systemd so I might be misusing it. From what I understand a system with logs that have never been altered should pass the validation.
It usually means that the file was not closed properly when shutting down or similar. You can ignore those failures, journald will remove those failing files following normal rotation of logs.