Your message dated Tue, 07 Apr 2020 06:03:52 +0000
with message-id <[email protected]>
and subject line Bug#946751: fixed in netdata 1.19.0-3
has caused the Debian Bug report #946751,
regarding bullseye/netdata-core systemd service too restrictive for binding
netdata to unix domain socket
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
946751: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946751
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: netdata-core
Version: 1.19.0-2
Hi,
since Netdata 1.8, you can bind the netdata webserver to a unix domain socket
(see https://docs.netdata.cloud/docs/running-behind-nginx/):
```
[web]
bind to = unix:/var/run/netdata/netdata.sock
```
Unfortunatly, our systemd netdata service on Debian is too restrictive to do
that:
```
sudo perl -w -pi -e 's|bind socket to IP = \*|bind to =
unix:/run/netdata.sock|' /etc/netdata/netdata.conf
sudo systemctl restart netdata
systemctl status netdata
[...]
[ 525.494010] netdata[647]: 2019-12-15 10:28:37: netdata ERROR : MAIN :
LISTENER: failed to remove existing (probably obsolete or left-over) file on
UNIX socket path '/run/netdata.sock'. (errno 30, Read-only file system)
[ 525.494623] netdata[647]: 2019-12-15 10:28:37: netdata ERROR : MAIN :
LISTENER: UNIX bind() on path '/run/netdata.sock' failed. (errno 30, Read-only
file system)
[ 525.494882] netdata[647]: 2019-12-15 10:28:37: netdata ERROR : MAIN :
LISTENER: Cannot create unix socket '/run/netdata.sock'
```
Fix:
Services like nsd add '/run' to the ReadWritePath:
```
cat /lib/systemd/system/nsd.service
[...]
[Service]
[...]
RuntimeDirectory=nsd
ReadWritePaths=/var/lib/nsd /etc/nsd /run
[...]
```
Maybe we should do that for netdata, too?
PS: with `RuntimeDirectory=netdata`, the "bind to" path to the socket would be
'/run/netdata/netdata.sock'. Just like the docs.netdata.cloud example above.
Thanks.
--- End Message ---
--- Begin Message ---
Source: netdata
Source-Version: 1.19.0-3
Done: Daniel Baumann <[email protected]>
We believe that the bug you reported is fixed in the latest version of
netdata, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Daniel Baumann <[email protected]> (supplier of updated netdata
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 07 Apr 2020 07:39:12 +0200
Source: netdata
Architecture: source
Version: 1.19.0-3
Distribution: sid
Urgency: medium
Maintainer: Lennart Weller <[email protected]>
Changed-By: Daniel Baumann <[email protected]>
Closes: 946751
Changes:
netdata (1.19.0-3) sid; urgency=medium
.
[ Daniel Baumann ]
* Updating years in copyright file for 2020.
* Updating to standards version 4.5.0.
.
[ Louis-Philippe Véronneau ]
* Allow binding a unix socket in /run (Closes: #946751).
Checksums-Sha1:
5f22404b81a02e9afa7e3afc8e6ff78b2459f833 2574 netdata_1.19.0-3.dsc
63bc999dd8bd762af239894014b3c261a469acf0 669316 netdata_1.19.0-3.debian.tar.xz
fcb44b3cd7d34af8624df44a5b93ad6e81668734 8846 netdata_1.19.0-3_amd64.buildinfo
Checksums-Sha256:
c0eff596de890e03ed130a6aa425361b219d66769f770e567f3b6910d1b81092 2574
netdata_1.19.0-3.dsc
8360890bed8424a6dbf80fbcbc7234d9ef4b51ff8e628888302fbc17b78e7c93 669316
netdata_1.19.0-3.debian.tar.xz
8e1f70effbbfebee28888f84f6d426ddaf2363645898bf92391fdbe3275ab025 8846
netdata_1.19.0-3_amd64.buildinfo
Files:
75eba618dea6054cf1c3cd2128178065 2574 net optional netdata_1.19.0-3.dsc
1199a0ab6679cb75cc8ff4b8429474cd 669316 net optional
netdata_1.19.0-3.debian.tar.xz
1f86c8b5f26034bd3f1ce5f9a2c568df 8846 net optional
netdata_1.19.0-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=8oNP
-----END PGP SIGNATURE-----
--- End Message ---
