Bug 1306050 - "rhel-dmesg" systemd service unit is missing "ConditionVirtualization=!container"
Summary: "rhel-dmesg" systemd service unit is missing "ConditionVirtualization=!contai...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: initscripts
Version: 7.2
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: initscripts Maintenance Team
QA Contact: Leos Pol
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-02-09 23:23 UTC by Elias Probst
Modified: 2016-11-25 13:05 UTC (History)
2 users (show)

Fixed In Version: initscripts-9.49.31-1.el7
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-11-04 06:43:42 UTC
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2016:2456 0 normal SHIPPED_LIVE initscripts bug fix update 2016-11-03 14:04:56 UTC

Description Elias Probst 2016-02-09 23:23:32 UTC
Description of problem:
Starting RHEL7/CentOS7 in a systemd-nspawn container results in rhel-dmesg.service failing to start:
systemd[1]: Starting Dump dmesg to /var/log/dmesg...
rhel-dmesg[36]: dmesg: read kernel buffer failed: Operation not permitted

The systemd service unit for rhel-dmesg.service needs to have the following line in the [Unit] section to prevent it from being started in container environments:

ConditionVirtualization=!container

Comment 5 Leos Pol 2016-08-23 13:54:36 UTC
I'm able to reproduce this issue on f24 host:
[root@guest ~]# rpm -q initscripts
initscripts-9.49.30-1.el7.x86_64
[root@guest ~]# systemctl status rhel-dmesg
● rhel-dmesg.service - Dump dmesg to /var/log/dmesg
   Loaded: loaded (/usr/lib/systemd/system/rhel-dmesg.service; disabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Tue 2016-08-23 09:46:09 EDT; 39s ago
  Process: 42 ExecStart=/usr/lib/systemd/rhel-dmesg (code=exited, status=1/FAILURE)
 Main PID: 42 (code=exited, status=1/FAILURE)

Aug 23 09:46:09 guest systemd[1]: Starting Dump dmesg to /var/log/dmesg...
Aug 23 09:46:09 guest rhel-dmesg[42]: dmesg: read kernel buffer failed: Operation not permitted
Aug 23 09:46:09 guest systemd[1]: rhel-dmesg.service: main process exited, code=exited, status=1/FAILURE
Aug 23 09:46:09 guest systemd[1]: Failed to start Dump dmesg to /var/log/dmesg.
Aug 23 09:46:09 guest systemd[1]: Unit rhel-dmesg.service entered failed state.
Aug 23 09:46:09 guest systemd[1]: rhel-dmesg.service failed.

On rhel7 host, looks all fine
[root@guest ~]# rpm -q initscripts
initscripts-9.49.30-1.el7.x86_64
[root@guest ~]# systemctl status rhel-dmesg
● rhel-dmesg.service - Dump dmesg to /var/log/dmesg
   Loaded: loaded (/usr/lib/systemd/system/rhel-dmesg.service; disabled; vendor preset: disabled)
   Active: active (exited) since Tue 2016-08-23 09:47:50 EDT; 23s ago
  Process: 48 ExecStart=/usr/lib/systemd/rhel-dmesg (code=exited, status=0/SUCCESS)
 Main PID: 48 (code=exited, status=0/SUCCESS)
   CGroup: /machine.slice/machine-guest.scope/system.slice/rhel-dmesg.service

Aug 23 09:47:50 guest systemd[1]: Starting Dump dmesg to /var/log/dmesg...
Aug 23 09:47:50 guest systemd[1]: Started Dump dmesg to /var/log/dmesg.

Using the latest initscripts on f24 host:
[root@guest ~]# rpm -q initscripts
initscripts-9.49.35-1.el7.x86_64
[root@guest ~]# systemctl status rhel-dmesg
● rhel-dmesg.service - Dump dmesg to /var/log/dmesg
   Loaded: loaded (/usr/lib/systemd/system/rhel-dmesg.service; disabled; vendor preset: disabled)
   Active: inactive (dead)
Condition: start condition failed at Tue 2016-08-23 09:52:22 EDT; 1min 28s ago
           ConditionVirtualization=!container was not met

Comment 7 errata-xmlrpc 2016-11-04 06:43:42 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-2456.html


Note You need to log in before you can comment on or make changes to this bug.