Looking at the statfs man page, it suggests that this error would happen if it is lacking "search" permission (the execute bit) on any of the enclosing directories.
I would recommend giving +rx on all directories in that path (/pg-data, /pg-data/postgresql, /pg-data/postgresql/12 and so on) – either to all (a+rx) or the group that owns them and add the node exporter to that group. I think this is not a security issue because it allows anyone / that group to `ls -l` the directories but not to access the files within, unless those files' permissions are way too wide. /MR On Mon, Nov 16, 2020 at 1:54 PM 'NAGARJUNA D.N' via Prometheus Users < [email protected]> wrote: > Hi, > > I have an FS mounted for PostgreSQL WAL logs which have limited > permissions. > > Where the disk usage not reported to Prometheus and am getting the > following error. > *Nov 14 18:22:30 timescale-masterdb node_exporter[7368]: level=debug > ts=2020-11-14T12:52:30.707Z caller=filesystem_linux.go:94 > collector=filesystem msg="Error on statfs() system call" > rootfs=/pg-data/postgresql/12/main/pg_wal err="permission denied"* > > Kindly suggest what permission I have to give for node_exporter users > without affecting postgres. > > Thanks > > > This communication is for informational purposes only. Any comments or > statements made herein do not necessarily reflect those of Blue Pi > Consulting India Private Limited, its subsidiaries and affiliates. This > transmission may contain information that is privileged, confidential, > legally privileged, and/or exempt from disclosure under applicable law. If > you are not the intended recipient, you are hereby notified that any > disclosure, copying, distribution, or use of the information contained > herein (including any reliance thereon) is STRICTLY PROHIBITED. Although > this transmission and any attachments are believed to be free of any virus > or other defect that might affect any computer system into which it is > received and opened, it is the responsibility of the recipient to ensure > that it is virus free and no responsibility is accepted by Blue Pi > Consulting India Private Limited, its subsidiaries and affiliates, as > applicable, for any loss or damage arising in any way from its use. If you > received this transmission in error, please immediately contact the sender > and destroy the material in its entirety, whether in electronic or hard > copy format. Thank you. > > -- > You received this message because you are subscribed to the Google Groups > "Prometheus Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/prometheus-users/9293ba11-a9f0-4a5f-ba78-ce15ce10d1e6n%40googlegroups.com > <https://groups.google.com/d/msgid/prometheus-users/9293ba11-a9f0-4a5f-ba78-ce15ce10d1e6n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/CAMV%3D_gYjUfXScykjYmvjKYbTRNuC3S3Gxx5V%3DSj7Xy8TmYDq%2BQ%40mail.gmail.com.
