iwasakims commented on pull request #640: URL: https://github.com/apache/bigtop/pull/640#issuecomment-633230343
> Can you share some technical reference to this. @evans-ye The background is similar to [BIGTOP-3302](https://issues.apache.org/jira/browse/BIGTOP-3302). systemd added check to see if service process belongs to the service as a fix for [CVE-2018-16888](https://nvd.nist.gov/vuln/detail/CVE-2018-16888). The check uses cgroups. * https://github.com/systemd/systemd/issues/6632 * https://github.com/systemd/systemd/pull/7816 If cgroups info is not available, init script fails with following message, indicating failure of checking added by the https://github.com/systemd/systemd/issues/6632. ``` May 21 11:53:07 2eef6a902086 zookeeper-server[2620]: Starting zookeeper ... STARTED May 21 11:53:07 2eef6a902086 runuser[2665]: pam_unix(runuser:session): session closed for user zookeeper May 21 11:53:07 2eef6a902086 systemd[1]: zookeeper-server.service: New main PID 2714 does not belong to service, and PID file is not owned by root. Refusing. ``` ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
